Tag
The LiteLLM 1.107.0 release on PyPI was compromised with a credential stealer and an RCE backdoor installed via all platform wheels, activated on every Python startup through cook.pth and sitecustomize.py. SafeDep's analysis shows the malicious sdist did not match its GitHub tag and was published outside the public release pipeline; PyPI has since removed the release.
For the second time in weeks, Microsoft's verified open-source packages were compromised with credential-stealing malware, affecting 73 packages on GitHub. The attack, linked to threat actor TeamPCP, uses stolen OIDC tokens and spreads laterally through cloud infrastructures.