Slowmist: LiteLLM Targeted Again by Supply Chain Attack, Malicious Version 1.107.0 Can Steal Cloud Credentials and AI API Keys

SlowMist monitoring reveals that LiteLLM has once again been targeted by a supply chain attack. The malicious version [email protected] affects PyPI packages and Docker images, including floating tags such as latest and main-stable. This malware executes automatically upon Python startup, stealing sensitive data such as cloud service credentials, AI API keys, and SSH private keys, and enables remote code execution. The affected versions have currently been removed or replaced. SlowMist advises users to avoid using version 1.107.0, rebuild affected environments with clean images, rotate potentially exposed credentials, and pin the version to 1.106.2.