Inside the LiteLLM 1.107.0 PyPI Compromise: Infostealer, CI Secrets, and Where Verification Failed

A technical breakdown of the malicious LiteLLM 1.107.0 PyPI release, examining how an infostealer and RAT harvested credentials from developer machines and CI pipelines, what secrets were exposed, and where package integrity verification broke down.