Attack
A malicious version of LiteLLM, 1.107.0, was published on PyPI and its Docker containers to steal credentials.
The last healthy version is v1.106.2, according to Wiz.
The stealer, named privcollect, targets browser, cloud provider and AI service secrets in 16 modules.
API keys for OpenAI, Anthropic, Cohere and other LLM providers are among the targets.
BerriAI thinks the attacker obtained OAuth tokens from GitHub CLI in the logs of an exposed internal deployment.