LiteLLM v1.107.0 Supply Chain Attack Exposed: Two Intrusions Highlight Maintainer Account Risks
A malicious LiteLLM v1.107.0 package and Docker images exposed a supply chain attack that stole AI and cloud credentials. The incident, the second this year, used stolen maintainer GitHub OAuth tokens and highlights risks around maintainer accounts.