#litellm

LiteLLM Supply Chain Breach: Credentials Stolen via Compromised Release Pipeline

The open-source LLM gateway LiteLLM suffered a supply chain attack that injected a credential stealer into version 1.107.0, exposing sensitive user data and vendor API keys.