LiteLLM 1.107.0 on PyPI shipped credential stealer and RCE backdoor via .pth
petrusenko_max · x · 2026-10-22
All seven wheels of LiteLLM 1.107.0 on PyPI shipped a cook.pth file that imports a credential stealer and an RCE backdoor — both execute whenever any Python process starts, even without importing litellm.
PyPI has removed the malicious version. Versions 1.106.2, 1.107.0rc1 and rc2 are confirmed clean. Anyone who installed 1.107.0 should downgrade and rotate credentials.
More from Infra
- Ollama Runs Open Models on NVIDIA Blackwell via Crusoe, Live in Two Weeks — ollama · 2026-10-22
- Claim: every 2nd/3rd-tier inference provider now has a recipe for 90%+ compute margins — zephyr_z9 · 2026-10-22
- NVIDIA keynote: silicon photonics CPO switches hit 102.4 Tb/s, Vera Rubin architecture unveiled — thealexbanks · 2026-10-22
- PyTorch Foundation Adds Nine Members, Nebius, Nscale and Shopify Join as Platinum — PyTorch · 2026-10-22
- GPU startup Flappy Airplanes raises $1B Series A co-led by Index and Lux — vitaliychiley · 2026-10-22
- Crusoe unveils Tinker API-compatible LLM post-training platform at PyTorch Conference — PyTorch · 2026-10-22