LiteLLM 1.107.0 on PyPI ships credential stealer and backdoor; pin to 1.106.2
cedric_chee · x · 2026-10-22
Another supply chain attack: litellm==1.107.0 on PyPI ships a credential stealer and a backdoor, both running on every Python start even for processes that never import litellm. The stealer targets SSH keys, AWS credentials, browser passwords, Claude Code/Cursor/Copilot configs, and LLM provider keys in the LiteLLM proxy database. The backdoor forks a daemon that phones home hourly and runs arbitrary returned code. Fix: pin to 1.106.2; full IOCs published.
More from coding & agent
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Social AI 'Boba' launches: the hard part is knowing when to stay quiet in group chats — gharik · 2026-10-23
- New data marketplace lets vendors list repos; coding agents access via MCP server — testingcatalog · 2026-10-23
- AI agent payments debate: experts say agents need verifiable mandates, not credential sharing — AlexTensor · 2026-10-23
- MCP Tip: One-Line Instructions Beat Long Tool Descriptions, 18/20 vs 3/10 in Evals — colinmcnamara · 2026-10-23
- DynaLM: Open-Source CPU-First LLM Inference Engine Seeks Feedback — Unlikely_Safety_7456 · 2026-10-23