LiteLLM Python Package Compromised in Supply Chain Attack
Attackers compromised the release pipeline of the popular LiteLLM Python package, publishing malicious version 1.107.0 to PyPI and Docker Hub on October 21, 2026, which delivered a credential stealer and backdoor; the package was subsequently quarantined on PyPI.
5newsrooms
7articles
5.1 daysrunning
Oct 21first seen
Ask Scout
Scout answers questions about this story using only the coverage below.
Coverage over time
Articles
| Oct 26, 1:30 PM | theregister.com | LiteLLM supply chain attack started with an exposed master key |
| Oct 23, 1:40 AM | thenextweb.com | LiteLLM says hackers poisoned it with GitHub tokens leaked via Claude Code |
| Oct 23, 1:10 AM | securityweek.com | LiteLLM Compromised in Fresh Supply Chain Attack |
| Oct 22, 12:12 PM | bleepingcomputer.com | LiteLLM release pipeline hacked to distribute info-stealer malware |
| Oct 22, 1:28 AM | thehackernews.com | LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release |
| Oct 21, 11:22 AM | theregister.com | LiteLLM supply chain attack hoovers up passwords and secrets |
| Oct 21, 11:01 AM | thehackernews.com | LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor |