Key Info
LiteLLM announced that its investigation into the attack chain behind the v1.107.0 release is complete, with the findings published in a linked report.
Highlights
- The company says the investigation into how the v1.107.0 release was compromised has concluded.
- A full write-up of the attack chain is available at the linked URL.
- The post follows earlier disclosure of malicious 1.107.0 artifacts on PyPI, Docker Hub and GHCR.
- No new technical details are included in the post itself beyond the link to the report.