LiteLLM 1.107.0 Compromised on PyPI, Spreading Credential Stealer and Remote Access Trojan
Sign in✓ Signed in
LiteLLM version 1.107.0 was discovered on October 21, 2026, containing malicious code injected directly into Python wheels on PyPI, exfiltrating browser passwords, cloud credentials, SSH keys, and AI provider API tokens from developer systems and CI/CD pipelines. The compromised release affected all seven distributed wheel files for macOS, Linux (glibc and musl variants), and Windows, as well as official Docker images carrying the latest, main-latest, and main-stable tags.
Continue reading
The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in✓ Signed in — this article isn’t included in your current plan.
Unlocking the full article...