According to CoinMeta, LiteLLM has been targeted by a supply chain attack for the second time this year. Security firm JFrog discovered that malicious software was embedded in its latest version 1.107.0, and the official Docker images were also affected. Hackers concealed three additional files within the Python installation package; even if users did not invoke LiteLLM, the malicious code would still run automatically to collect browser passwords, SSH private keys, cloud platform credentials such as AWS, as well as authentication information for development tools like Claude, Codex, and Cursor. The attackers left a persistent backdoor that checked for remote commands once per hour. JFrog warns that users who have installed or run version 1.107.0 should consider their relevant credentials potentially compromised, isolate their environments, and re-establish them, replacing sensitive credentials such as API keys. The confirmed safe version to revert to is 1.106.2.