GoKawiilMalicious LiteLLM 1.107.0 package on PyPI bundled stealer and backdoor
A LiteLLM release published to PyPI as version 1.107.0 contained three hidden files that installed a credential-stealing script and a persistent backdoor on any machine that ran pip install, regardless of whether litellm was ever imported. The malicious code harvested SSH keys, cloud and CI/CD credentials, browser passwords and LLM API keys, sent them to an external domain, and set up an hourly process that fetched and executed remote code. PyPI has removed the release, and the official GitHub source and other recent versions were confirmed clean.