Safety & Ethics
Attackers hijack LiteLLM's release pipeline and ship a credential-stealing 1.107.0 build to PyPI and Docker for about two hours
A poisoned LiteLLM 1.107.0, built from a lookalike repository with stolen developer tokens, was live on PyPI and in official Docker images on October 21 and harvested cloud, AI-tool and proxy credentials; the project say…