LiteLLM 1.107.0 Compromise: Credential Stealer and RAT Discovered

• •LiteLLM 1.107.0 contains a credential stealer and RAT, affecting all platforms.
• •The malicious payload executes on Python startup, even without importing LiteLLM.
• •Users must check for specific temporary files to assess compromise and should stop using the affected version.

On October 21, 2026, version 1.107.0 of LiteLLM was compromised, containing a credential stealer and a remote access trojan (RAT) that executes on Python startup. The malicious code was injected into the package's wheels on PyPI and its official Docker image. Users who installed this version should assume their credentials are compromised and check for specific temporary files indicating the attack. The attack exploited a directive in LiteLLM's build configuration to include malicious files that are not present in the source repository. PyPI has since quarantined the compromised version, and the Docker image has been removed from public registries. This incident marks the second documented hijacking of LiteLLM in 2026, following a previous compromise earlier in the year. The malicious payloads can exfiltrate sensitive data and allow for remote code execution, affecting a wide range of users.