LiteLLM suspects GitHub token leak in AI gateway logs behind malicious package

LiteLLM disclosed that attackers bypassed multiple independent security controls to publish version 1.107.0 with a credential stealer and backdoor to PyPI and Docker Hub on October 21, 2026. The release pipeline was compromised around 4:00 a.m., and the company suspects a GitHub token leaked in AI gateway logs.

• Malicious version 1.107.0 reached PyPI and Docker Hub on October 21, 2026
• The package carried a credential stealer and a backdoor
• Attackers bypassed multiple independent security controls
• LiteLLM suspects a GitHub token leaked in AI gateway logs