A compromised LiteLLM release ships credential-stealing malware
Attackers compromised LiteLLM's release pipeline and published malicious version 1.107.0 to PyPI and container registries; JFrog researchers analyzed credential-stealing code and a remote-code loader in the artifacts. LiteLLM removed them and said its private enterprise release channel was unaffected.
Sources
LiteLLM
Report · Oct 21, 2026
Contained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised
Additional sources
JFrog Security Research
Report · Oct 21, 2026
LiteLLM Hijacked Again: Malicious 1.107.0 Wheels Steal Credentials and Load Remote Code
LiteLLM
Report · Oct 23, 2026
The attack chain behind the v1.107.0 LiteLLM release
The Hacker News
News · Oct 22, 2026
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release