Popular Python library Litellm compromised with credential-stealing malware since March 24, affecting major AI projects like Ollama.

Litellm package on PyPI was infected with malicious code designed to steal credentials

The compromise affects systems with auto-update enabled, as well as any downloads after March 24

Litellm is a critical dependency across open-source AI stacks, including Ollama

Users should downgrade to version 1.82.6 or earlier to avoid the compromised versions