Malicious LiteLLM Package Exposes Cloud and AI Credentials

Unknown hackers compromised a malicious version of the LiteLLM package, which is downloaded 23 million times weekly, stealing cloud and AI credentials and installing a remote access trojan. Anyone who ran version 1.107.0 on any platform should assume their secrets have been stolen and take immediate action.

A malicious version of the popular LiteLLM package, downloaded a staggering 23 million times weekly, was compromised by unknown hackers who stole cloud and AI credentials and installed a remote access trojan. If you ran version 1.107.0 on any platform, assume your secrets have been stolen and take immediate action.