BreakingCyber Security
LiteLLM 1.107.0 Compromised: Automatic Credential Theft via Python Initialization
A malicious version of the LiteLLM package (1.107.0) was distributed via PyPI, executing code automatically whenever Python started in an affected environment. The payload targeted credentials across developer tools, cloud providers, and AI configurations without requiring the LiteLLM package to be explicitly imported by the application.