[LiteLLM Faces Another Supply Chain Attack, Malicious Version 1.107.0 Capable of Stealing Credentials and Keys] According to SlowMist, LiteLLM has once again suffered a supply chain attack. The malicious version [email protected] affects PyPI packages and Docker images, including floating tags such as latest and main-stable. The injected malicious code automatically executes upon Python startup, stealing sensitive data such as cloud credentials, AI API keys, and SSH private keys, while also supporting remote code execution. The affected versions have been removed or replaced. SlowMist advises users to avoid using version 1.107.0, rebuild affected environments from clean images, rotate potentially compromised credentials, and pin the version to 1.106.2.