LiteLLM Supply Chain Attack Compromises Release Pipeline, Distributes Malicious Python Package

On October 22, 2026, LiteLLM announced that its release pipeline had been compromised by threat actors. The attackers gained access to "multiple independent security controls" and used this access to push version 1.107.0 of the LiteLLM Python package to the Python Package Index (PyPI) and Docker Hub registries. The incident occurred around 4:00 a.m. on October 21, 2026.

The malicious package version 1.107.0 contains both a credential stealer and a backdoor. Users who download and install this version from PyPI or Docker Hub risk having their credentials harvested and their systems compromised by the backdoor component. LiteLLM has urged users to immediately upgrade to a version newer than 1.107.0 and to verify package integrity.

The investigation into the compromise is ongoing. The method by which the threat actors bypassed multiple security controls has not been fully detailed in the initial disclosure. The incident highlights the risks associated with supply chain attacks targeting software release infrastructure.