LiteLLM, 92M monthly downloads, compromised: v1.107.0 ships credential-stealing malware
samuelcolvin · x · 2026-10-22
Socket Security reports that LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised. Version 1.107.0 ships credential-stealing malware via PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools. The reposter plugs Pydantic AI Gateway as a supply-chain-safer alternative: an enterprise AI routing gateway with one key for multiple providers (Anthropic, OpenAI, Bedrock, Vertex, Groq, Azure), BYOK support, native-format passthrough, and real-time monitoring with budget control.
Related event: LiteLLM 1.107.0 Poisoned in Supply-Chain Attack(9 posts)→
More from coding & agent
- Richard Socher's Recursive launches Flint, a local coding model hitting 125+ tok/s on MacBook — aryaman2020 · 2026-10-22
- Anthropic launches Claude Duet always-on agent; reviewer shifts to 50/50 from ChatGPT — every · 2026-10-22
- Datadog team has been generating TLA+ via skills, eyeing a meta-skill for full suites — tianyin_xu · 2026-10-22
- Agent planned a whole trip solo: perfect logistics, zero vibe — tech__unicorn · 2026-10-22
- "AI swarms that patch the world's vulnerable software for free" — who's building this? — voooooogel · 2026-10-22
- Recursive launches Flint, a laptop coding model largely built by AI — TechCrunch AI · 2026-10-22