Breaking

LiteLLM Release Pipeline Compromised in Supply Chain Attack Targeting AI Developer Credentials

October 23, 2026 at 15:12 EDT

Security
Foundation Models
Open Source

LiteLLM's release pipeline was breached on October 21, 2026, with threat actors injecting info-stealing malware into version 1.107.0 distributed across PyPI and Docker registries. The malicious package remained available for approximately two hours before removal, putting millions of developers across AI infrastructure at risk.

October 2026 • Security Incident

LiteLLM Supply Chain Attack

Malicious version 1.107.0 distributed via PyPI and Docker steals cloud credentials from millions of developer systems.

92M

Monthly downloads

~2 hrs

Time before removal

2,500+

Orgs exposed (2026)

Stolen Data

Cloud credentials: AWS, Azure, GCP access keys; Kubernetes tokens
Developer tokens: GitHub CLI, npm, PyPI, Maven, Cargo, AI platform tokens
Browser & system data: Passwords, cookies, SSH/GPG keys, shell history
Process environment: All readable environment variables including CI/CD secrets

Attack Method

Three malicious files (cook.pth, cook.py, sitecustomize.py) placed in Python site-packages. When Python starts, cook.pth automatically imports cook.py, which decodes and executes credential-theft code. Stolen data encrypted with AES-256-CBC and RSA-4096, exfiltrated to attacker infrastructure. Hourly RCE channel fetches and executes remote code.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.