A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...

This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...

The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

Who knew file servers could be this easy?

It worked on my PC, but it doesn't work on another.Just a slight difference in Python version, libraries, or OS settings can ...

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's ...