cook.pth: malicious LiteLLM 1.107.0 on PyPI steals secrets on every Python launch

The malicious LiteLLM 1.107.0 was uploaded to PyPI on Oct 21, 2026, between 11:39 and 11:40 UTC, and Socket caught it 7 minutes later. The Docker image ghcr.io/berriai/litellm:v1.107.0 is also infected: it was served under the latest, main-latest and main-stable tags.