LiteLLM Hit by Supply Chain Attack: Credential Stealer Targets 23M Weekly Users
Hackers compromised LiteLLM's release pipeline on October 21, pushing malicious version 1.107.0 through PyPI and Docker Hub. The infostealer malware targeted AI and cloud credentials from AWS, Azure, OpenAI, and Anthropic, while a remote access trojan enabled arbitrary code execution. The attack affected the popular AI gateway with 23 million weekly downloads used by NVIDIA, Netflix, and AT&T.