Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
2026-10-21T14:11:31.147Z