LiteLLM 1.107.0 pushed to PyPI and Docker with a credential stealer
LiteLLM 1.107.0 shipped a credential stealer and a remote-code loader via PyPI wheels and GHCR images. Socket flagged it minutes after publish. Pin 1.106.2 and rotate exposed secrets.