Attackers poison LiteLLM 1.107.0 on PyPI and Docker with a credential-stealing backdoor
Live about two hours on 21 October 2026. cook.pth runs on any Python start. Claude Code OAuth tokens in public logs sit on the attack path LiteLLM describes.
Read the piece