LiteLLM confirms compromised 1.107.0 wheels and public images.

Summary

The October 21 report, updated at 20:30 UTC, identifies seven wheels and public images, not the GitHub source tag. PyPI removed the release at 13:23 UTC; affected GHCR tags were unavailable by 13:51 and Docker Hub was corrected at 14:20. The private enterprise registry was unaffected, according to LiteLLM. SafeDep found credential theft and a backdoor activated at Python startup, even without importing LiteLLM.

Sources

LiteLLM — incident report, October 21, 20:30 UTC SafeDep — direct analysis of the malicious artifacts