“anyone who ran the compromised package on any platform should assume their secrets have been stolen.”
LiteLLM pulls about 23 million downloads a week. Its whole job is to hold every AI provider key a company owns. That makes it the best credential jar in the stack. This is its second compromise this year, and the malicious commits came from a lookalike repo with one extra hyphen. BerriAI did not answer The Register.