Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Version 1.107.0 of the LiteLLM package on PyPI contained malicious code that steals credentials (SSH keys, cloud credentials, AI tool tokens, and browser passwords) and provides remote code execution capability through a backdoor that checks for updates hourly. The malicious files were injected into the wheel distribution through a modified build configuration line not present in the upstream GitHub source, and PyPI has since removed the compromised release. All other versions including 1.106.2, 1.107.0rc1, and 1.107.0rc2 are confirmed to be clean.