AI Summary

Hackers compromised the release pipeline of LiteLLM, an open‑source AI gateway, and inserted credential‑stealing malware into version 1.107.0. The malicious package was published to the Python Package Index and to the project’s official Docker images on October 21. This incident is the second supply‑chain breach of the LiteLLM project this year, occurring despite security measures added after a prior attack.

AI summaries can be wrong sometimes—always verify important details using the source article.