All seven LiteLLM 1.107.0 wheels carried the credential stealer; earlier versions clean
arpit_bhayani · x · 2026-10-22
Additional detail on the LiteLLM 1.107.0 PyPI compromise (via safedep.io): all seven wheels (Linux, macOS, Windows) installed a credential stealer and RCE backdoor into site-packages, executing whenever any Python process started — no litellm import required. The upstream GitHub source contained none of it. PyPI has removed the release.
Scope: versions 1.106.2, 1.107.0rc1, and 1.107.0rc2 are clean, as are the pinned companion packages litellm-proxy-extras==0.4.110 and litellm-enterprise==0.1.78.
More from Safety
- Greg Brockman: AI makes hacking 100x more profitable and easier, upending hacker economics — gabriel1 · 2026-10-23
- Account hacks surge: 6-step emergency checklist plus an AI audit prompt — petergyang · 2026-10-23
- For consumer AI founders, 'When are you launching in Europe?' is the new 'When Android?'—only 100x worse — omooretweets · 2026-10-23
- mmitchell_ai questions whether the AI safety vs security framing stems from EA — mmitchell_ai · 2026-10-23
- MPI-Sec PhD Thesis on Vulnerability Detection Benchmarks Includes Pre-LLM Classic "Top Score on the Wrong Exam" — mboehme_ · 2026-10-23
- Miles Brundage: 'beggars can't be choosers' still defines third-party AI eval access — Miles_Brundage · 2026-10-23