According to CoinMeta, as monitored by SlowMist, the open-source AI gateway Litellm has once again encountered a supply chain attack. The malicious version Litellm.107.0 affected PyPI packages and Docker images, including latest and main-stable among others. The injected malware executes automatically upon Python startup, stealing sensitive data such as cloud credentials, AI API keys, and SSH private keys, and also enables remote code execution. Affected versions have been removed or replaced. SlowMist recommends that users avoid using version 1.107.0, rebuild their environments from clean images, and rotate any potentially exposed credentials. It is recommended to fix the version to 1.106.2.