GoKawiilLiteLLM's PyPI package and Docker images hit by credential-stealing malware
The LiteLLM project's release pipeline was compromised on October 21, allowing attackers to publish a malicious version 1.107.0 to PyPI and Docker Hub containing compiled malware that steals credentials, secrets and environment variables. Affected artifacts included all seven PyPI wheels and several Docker Hub and GHCR image tags, live for roughly two to three hours before removal. The maintainer confirmed enterprise customers running the private version were not impacted, and said attackers modified only the installation package rather than the application code.
GoKawiil's interpretation of the reporting above, not reported fact.
LiteLLM is used by major companies including NVIDIA, Netflix, AT&T and Okta, and sees 92 million monthly PyPI downloads, so a compromise of its release pipeline could have exposed a large number of downstream systems to credential theft. The fact that security firms detected the malicious package within six minutes suggests fast-response monitoring limited the exposure window, though organizations that pulled the package during that period may still need to check for compromise. The incident underscores ongoing risks to open-source supply chains, where attackers increasingly target build and distribution pipelines rather than source code itself.
- LiteLLM version 1.107.0 was compromised with credential-stealing malware for about two hours on October 21.
- The attack affected PyPI wheels and Docker/GHCR images across Windows, Linux and macOS, though not the core application code.
- Security researchers detected the malicious release within six minutes, and the maintainer says enterprise customers were unaffected.
YubiKey 5C NFC Security Key — Supply-chain attacks like this LiteLLM compromise often aim to steal credentials and secrets that attackers can later use to escalate access. A hardware security key like the YubiKey adds a strong second factor so stolen passwords or tokens alone can't be used to break into your accounts or CI/CD pipelines. It's a practical step for developers and DevOps teams looking to harden their release and credential management workflows.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-22
Published there as: “LiteLLM release pipeline hacked to distribute info-stealer malware”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.