<![CDATA[LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor]]>

<![CDATA[LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor]]>The LiteLLM Python package has been compromised in a software supply chain attack that delivered a credential stealer and a backdoor, according to findings from SafeDep, Socket, StepSecurity, and Upwind.

The affected release is LiteLLM 1.107.0, which was distributed through PyPI wheels and Docker images. The package has since been quarantined on the Python Package Index (PyPI).

If your environment pulled this version, treat any credentials accessible to it as potentially exposed and review your dependency lockfiles and container images for the affected release.

Source: The Hacker News

Has your organization pinned or deployed LiteLLM 1.107.0, and if so, what steps are you taking to rotate credentials and verify your images?

]]>https://xploitlk.com/topic/796/litellm-compromised-in-supply-chain-attack-delivering-credential-stealer-and-backdoorRSS for NodeTue, 27 Oct 2026 07:24:52 GMTMon, 26 Oct 2026 04:30:17 GMT60