LiteLLM Release Pipeline Hacked for Malware

Hackers compromised the LiteLLM project's release pipeline on October 21, distributing malicious Docker images and PyPI wheels for version 1.107.0. This supply-chain attack impacted 61,800 GitHub stars and 92 million monthly downloads, affecting users of NVIDIA, Netflix, and AT&T. The malware steals credentials and secrets, with the recommended recovery version being LiteLLM 1.106.2.