LiteLLM PyPI Supply Chain Attack Drops Info-Stealer Malware
Attackers compromised LiteLLM's release pipeline, injecting credential-stealing malware into PyPI version 1.107.0 and multiple Docker images, exposing a project with 92 million monthly downloads. The malicious payload was silently executed at Python startup via crafted .pth and sitecustomize.py files, harvesting credentials, secrets, and environment variables before the host application could run. The incident highlights the acute risk of AI/ML tooling supply chains as high-value targets, given LiteLLM's deep integration into enterprise AI infrastructure at companies including NVIDIA, Netflix, and Okta.