LiteLLM 1.107.0 poisoned: PyPI and Docker images stole credentials, how to check and fix
Release 1.107.0 of the AI gateway LiteLLM carried a credential stealer for about 1 hour 44 minutes on 21 October; LiteLLM's analysis traces it to a master key leaked in May.
audiotale.net team7 min read
