LiteLLM 1.107.0 Compromised in Supply Chain Attack Targeting AI Developer Credentials

Popular AI gateway library LiteLLM shipped malicious code that harvests developer credentials and cloud secrets whenever Python starts, marking the second major supply chain breach of the widely-deployed package in 2026. On October 21, LiteLLM version 1.107.0 appeared on PyPI and Docker registries containing a credential stealer and remote access trojan designed to extract SSH keys, cloud authentication tokens, and AI service API keys from affected developer machines. The malicious package remained accessible for approximately 2 hours on PyPI and 2.5 hours on Docker before security teams at Socket, Aikido, and JFrog flagged the compromise, prompting rapid removal by the package maintainers.