LiteLLM 1.107.0 shipped a credential stealer for about two hours
0 to PyPI and Docker with malware that steals credentials from the host, including cloud keys, AI keys, and SSH keys. The bad PyPI wheels were live about 11:39 to 13:23 UTC. Docker tags were affected until about 14:20 UTC.
SlowMist issued an alert. No crypto theft has been tied to it yet. Research snapshot from LiteLLM and SlowMist.
369 take
If that version was installed or the latest Docker tag was pulled in that window, rebuild the machine from a clean image and move funds off any wallet key that host could see. Pin 1.106.2.
Sources