LiteLLM 1.107.0 steals credentials and installs a remote

Feeds.4Sysops •IT News • October 21, 2026

LiteLLM, an open-source gateway for connecting applications to large language model providers, shipped a malicious release through PyPI and Docker. Version 1.107.0 runs credential-stealing code when Python starts and installs a remote-access trojan; the compromised package and image have since been removed. Version 1.106.2 is the latest safe release. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LiteLLM 1.107.0 Compromised: Credential Stealer and RAT Distributed via PyPI On October 21, 2026, the LiteLLM Python package version 1.107.0 was compromised in a supply chain attack, distributing malware that includes a credential stealer and a remote access trojan (RAT). The malicious code was injected into the package's wheels on PyPI and Docker images, affecting all platforms. The attack exploited a vulnerability in the build process, allowing attackers to add files that execute automatically when Python starts, even if LiteLLM is not explicitly imported. The compromised version has since been quarantined on PyPI, and the Docker images have been removed. Users who installed this version should assume their credentials are compromised and take immediate action to rotate secrets. This incident marks the second compromise of LiteLLM in 2026, following a previous incident in March. Investigations are ongoing to determine how the attack was executed and to secure the development environment. 24 sources 72

Extracted Entities

LiteLLM 1.107.0 steals credentials and installs a remote

The full story

Extracted Entities

Attack Types (2)

MITRE ATT&CK (1)

Platforms (1)

Tools (2)