#pypi

LiteLLM 1.107.0 compromised: how the .pth backdoor works, and how to check and clean up

LiteLLM 1.107.0 ran a credential stealer at every Python start. How the attack worked, how to check hosts safely, and what to rotate.