Backdoored Python Gateway: How a Supply Chain Attack Exposed Critical Flaws in LLM Infrastructure

A supply chain attack on LiteLLM, a widely-adopted Python LLM gateway, exposed a fundamental architectural vulnerability through Python's .pth file execution mechanism. The incident demonstrates how language-specific features can become persistent attack vectors, affecting major downstream projects and raising critical questions about the security of Python-based production infrastructure.