LiteLLM release pipeline hacked to distribute info-stealer malware

Attackers gained access to LiteLLM's CI/CD release pipeline and injected an info-stealer into a published PyPI package and container images, targeting cloud credentials, AI provider tokens, and developer secrets. This is a textbook software supply chain attack: by compromising the build and distribution infrastructure rather than the source code itself, the threat actors bypassed most traditional code review controls. The fact that the malicious release reached PyPI and Docker Hub before detection illustrates how trusted distribution channels can be weaponised against downstream users at scale. Because LiteLLM is used by organisations like NVIDIA, Netflix, and Okta, the blast radius of even a short-lived compromise is enormous. It underscores that securing the pipeline — including secrets, signing keys, and publishing credentials — is as critical as securing the application code.