Security50 mOctober 23, 2026, 02:12

LiteLLM release pipeline hacked to distribute info-stealer malware

Attackers compromised LiteLLM's release pipeline and published version 1.107.0 with malicious code to PyPI and Docker Hub. The payload steals credentials, secrets and environment variables on Windows, Linux and macOS. The clean recovery version is 1.106.2.

BleepingComputer

Open source

LiteLLM release pipeline hacked to distribute info-stealer malware

Malicious version 1.107.0 was live on PyPI from 11:39 to 13:23 UTC
All seven PyPI wheels and Docker Hub and GHCR images were affected
The stealer harvests AWS, Azure, GCP, Git and SSH keys plus browser data
LiteLLM is used by Nvidia, Netflix, AT&T and Okta with 92M monthly downloads

#LiteLLM#PyPI#Docker

LiteLLM compromised in supply chain attack with credential stealer

Security

Compromised MemTensor packages push sckit credential stealer via npm and PyPI

Security

AI Agents Become a New Malware Distribution Channel

Security

LiteLLM release pipeline hacked to distribute info-stealer malware

LiteLLM compromised in supply chain attack with credential stealer

Compromised MemTensor packages push sckit credential stealer via npm and PyPI

AI Agents Become a New Malware Distribution Channel

LiteLLM suspects GitHub token leak in AI gateway logs behind malicious package