LiteLLM encounters supply chain attack, malicious version 1.11.0 can steal credentials and keys

LiteLLM encounters supply chain attack, malicious version litellm@1.107.0 Affected PyPI packages and Docker images, the injected malicious code steals cloud credentials, AI API keys, SSH private keys, and supports remote code execution. Users should avoid using version 1.107.0, rebuild the environment from a clean image, rotate potentially leaked credentials, and fix the version to 1.106.2. (Source: SlowMist)