LiteLLM compromised again in supply chain attack; malicious release litellm@1.107.0 hits PyPI and Docker images

SlowMist's threat-intelligence team reports LiteLLM was compromised again in a supply chain attack. The malicious release litellm@1.107.0 affects PyPI packages and Docker images, including floating tags such as latest and main-stable, with injected malware executing automatically during Python installation. The claim is unconfirmed.

Detected & updated continuously · Source: Nebula