LiteLLM Python Package Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

On October 21, 2026, multiple cybersecurity research firms including SafeDep, Socket, StepSecurity, and Upwind disclosed that the LiteLLM Python package, version 1.107.0, had been compromised as part of a software supply chain attack. The compromised distribution was made available through PyPI wheels and Docker images. The malicious code delivered a credential stealer and a backdoor to systems where the package was installed. The LiteLLM package has since been quarantined on the Python Package Index (PyPI). Security researchers have warned that users of the affected version face risks of credential theft and unauthorized system access. The exact method of compromise, such as whether it resulted from a maintainer account takeover or CI/CD infiltration, remains unconfirmed. Investigations are ongoing to determine the full scope and origin of the attack. The incident highlights the ongoing risks associated with third-party Python packages and the importance of verifying package integrity and checksums when installing dependencies.