A compromised release of LiteLLM 1.107.0 was discovered on PyPI, deploying a credential stealer and a persistent backdoor. These malicious implants execute automatically on every Python startup to silently harvest sensitive data from affected systems. Security researchers are investigating the supply chain attack and have released indicators of compromise to help developers detect the infection.