LiteLLM's compromised build shipped with signed provenance. It said the source was a repository one hyphen off the real one
2026-10-22Security
Seven wheels and the floating Docker tags carried a credential stealer. Every v1.107.0 image recorded its source as Berri-AI, not BerriAI, in build provenance anyone could read and nobody did.