Attackers shipped a credential-stealing LiteLLM release through its own build pipeline. Version 1.107.0 survived two hours on PyPI and that was enough.
