According to monitoring by SlowMist, the open-source AI gateway LiteLLM has once again suffered a supply chain attack. The malicious version [email protected] affects PyPI packages and Docker images, including floating tags like latest and main-stable. The injected malware executes automatically when Python starts, stealing sensitive data such as cloud credentials, AI API keys, and SSH private keys, and can enable remote code execution. The affected version has been removed or replaced. SlowMist advises users to avoid using 1.107.0, rebuild environments from clean images, and rotate any potentially exposed credentials. It is recommended to lock the version to 1.106.2. https://www.(wublock123.com)/news/slowmist-litellm-supply-chain-attack-malicious-version-steals-cloud-credentials-keys-70505