LiteLLM release pipeline hacked to distribute info-stealer malware

Summary

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images. The payload steals credentials, secrets, and environment variables.

Timeline

1. BleepingComputer

   22 Oct 2026, 19:12 UTCSource ↗

   Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.