LiteLLM 1.107.0 Supply Chain Attack Compromises PyPI and Docker
LiteLLM's release pipeline was compromised on October 21, pushing v1.107.0 with compiled malware to PyPI and Docker Registry that steals credentials and enables remote code execution. The company has published a security advisory listing affected Docker tags and remediation steps.
2026-10-23 ~ 2026-10-23 · 2 related posts
- Episode 1: LiteLLM 1.107.0 supply chain attack planted credential stealer and backdoor(2026-10-21, 19 posts)
- Episode 2: Railway, OpenCode and LiteLLM Hit in String of Supply-Chain Attacks Targeting AI API Keys(2026-10-22, 2 posts)
- Episode 3: Free Agent Cyber Defense bundle released after LiteLLM supply-chain attack(2026-10-23, 3 posts)
- Episode 4: Security Checklist Flags Critical Vulnerabilities in Local AI Stacks(2026-10-23, 2 posts)
- Episode 5: LiteLLM 1.107.0 Supply Chain Attack Compromises PyPI and Docker(2026-10-23, 2 posts)
- LiteLLM v1.107.0 supply-chain compromise: don't pip fix, delete cook.pth and rotate keys — alvelda · 2026-10-23
- LiteLLM posts official advisory listing affected Docker tags and remediation steps — alvelda · 2026-10-23