According to CoinMeta, litellm has encountered a supply chain attack. The malicious version 1.107.0 has affected pypi and docker images. The injected malicious code steals cloud credentials, AI API keys, and SSH private keys, and also supports remote code execution. Users should avoid using version 1.107.0, rebuild their environments from clean images, rotate any potentially leaked credentials, and fix the version to 1.106.2.