LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...