New LiteLLM Supply Chain Attack Hits PyPI and Docker

Socradar •Yağmur Ernalbant • October 22, 2026

A new LiteLLM supply chain attack has turned version 1.107.0, an official release of the popular open-source LLM gateway, into a credential stealer. On October 21, 2026, attackers used stolen maintainer tokens to publish trojanized wheels to PyPI and poisoned Docker images, exposing cloud keys, AI provider secrets and LiteLLM proxy databases on any host […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LiteLLM 1.107.0 Compromised: Credential Stealer and RAT Distributed via PyPI On October 21, 2026, the LiteLLM Python package version 1.107.0 was compromised in a supply chain attack, distributing malware that includes a credential stealer and a remote access trojan (RAT). The malicious code was injected into the package's wheels on PyPI and Docker images, affecting all platforms. The attack exploited a vulnerability in the build process, allowing attackers to add files that execute automatically when Python starts, even if LiteLLM is not explicitly imported. The compromised version has since been quarantined on PyPI, and the Docker images have been removed. Users who installed this version should assume their credentials are compromised and take immediate action to rotate secrets. This incident marks the second compromise of LiteLLM in 2026, following a previous incident in March. Investigations are ongoing to determine how the attack was executed and to secure the development environment. 24 sources 72

New LiteLLM Supply Chain Attack Hits PyPI and Docker

The full story

Extracted Entities

Attack Types (1)

Tools (1)