LiteLLM release pipeline hacked to distribute info-stealer malware

Jak se o tom psalo 3

1. 23. 10. 2026 20:12 · Microsoft Security Blog US

   Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

   In this article Attack overview Technical details Mitigation and protection guidance Indicators of compromise References Learn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that Python could execute during normal interpreter initialization. An application did not need to import LiteLLM for the payload to run: starting Python in an affected…

2. 22. 10. 2026 21:12 · BleepingComputer US nadpis události

   LiteLLM release pipeline hacked to distribute info-stealer malware

   Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]

3. 21. 10. 2026 15:05 · Aikido Security BE

   LiteLLM compromised again: infostealer and RAT found in version 1.107.0

   LiteLLM 1.107.0 contains an infostealer and RAT, and PyPI has quarantined the package. See if you’re affected, what it steals, and what to rotate. Category: Vulnerabilities & Threats