The LiteLLM Python package has been compromised, distributing a credential stealer and backdoor to users through PyPI wheels and Docker images.
The vulnerability or weakness
The vulnerability was exploited through the use of stolen GitHub CLI OAuth tokens, compromising the project-releaser run and approval process.
Earlier attacks and coverage
- AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign (2026-10-20)
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories (2026-10-19)
Business impact
Organizations using LiteLLM 1.107.0 are at risk of credential theft and potential backdoor access, impacting data security and operations.
Industries affected
Tech and software development firms are particularly at risk, as LiteLLM is a common package in these sectors.
Users affected
Users of LiteLLM 1.107.0 are advised to update to the latest version and remove affected packages to mitigate potential threats.
