Security
LiteLLM 1.107.0 Compromise Explained: How a .pth File Ran on Every Python Start
A poisoned LiteLLM release on PyPI and Docker stole cloud and AI credentials without ever being imported. Here is the mechanism, the timeline, and the cleanup.