suspectedhighSupply chainFirst reported Oct 21, 2026
LiteLLM: malicious 1.107.0 PyPI release spread infostealer and RAT
LiteLLM version 1.107.0 was reported compromised on PyPI on October 21, 2026, with all seven wheel files carrying a credential stealer and a remote access trojan. The malicious release also reached Docker images, affecting developer systems, build runners, and AI services. Security firm Aikido warned that anyone who installed the release should assume credentials were compromised.
Members only
The full record: the timeline and 1 linked report
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment LiteLLM — or anything else you track — is hit again
A free account is all it takes — no card, one minute.