A poisoned LiteLLM release stole credentials for two hours before PyPI pulled it (safedep.io)
LiteLLM 1.107.0 reached PyPI at 11:39 UTC on 21 October and ran a credential stealer inside every Python process on the host. A hidden daemon then phoned home hourly for more code, and by 13:40 the release was gone.
Would a dependency cooldown have caught it? One supply-chain engineer in the thread says even 24 hours is enough. A skeptic says the median attack stays hidden for months.
Sign in to save