LiteLLM Python package compromised in supply chain attack that delivered a credential stealer and backdoor

Summary

The popular LiteLLM Python package was compromised in a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromised release is LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The package has since been quarantined on the Python Package Index (PyPI). LiteLLM later disclosed that threat actors got past multiple independent security controls to push the malicious version. On October 21, 2026, its release pipeline was compromised to push 1.107.0 to the Docker Hub registry and PyPI. One report says LiteLLM suspects a GitHub token leak in its AI gateway logs was involved.

Timeline

1. The Hacker News

   21 Oct 2026, 18:01 UTCSource ↗

   The Hacker News reports that the popular LiteLLM Python package was compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, citing SafeDep, Socket, StepSecurity, and Upwind, and that the compromise affects LiteLLM 1.107.0 distributed through PyPI wheels and Docker images.

2. The Hacker News

   22 Oct 2026, 08:28 UTCSource ↗

   The Hacker News reports that LiteLLM disclosed on Wednesday that threat actors compromised multiple independent security controls to push a malicious version containing a credential stealer and a backdoor, that its release pipeline was compromised on October 21, 2026 to push 1.107.0 to Docker Hub and PyPI, and that the incident took place around 4:00 a.m.