LiteLLM v1.107.0 supply-chain compromise: don't pip fix, delete cook.pth and rotate keys
alvelda · x · 2026-10-23
- On Oct 21 LiteLLM's release pipeline was compromised, pushing v1.107.0 with compiled credential-stealing malware and RCE loaders to PyPI and Docker. The PyPI package lived 2 hours; Docker tags v1.107.0/latest/main-latest/main-stable were affected; enterprise release untouched.
- alvelda warns the payload runs at every Python start, including pip itself — so don't use pip to fix. Delete cook.pth and two files from site-packages, kill the daemon, rebuild clean, and rotate every key the machine could reach.
- LiteLLM says attackers had to breach multiple independent security controls; incident contained, investigation ongoing.
Related event: LiteLLM 1.107.0 Supply Chain Attack Compromises PyPI and Docker(2 posts)→
More from coding & agent
- Gemini 4 Argon builds a 3D Gothic cathedral from one image via Blender MCP — GoogleDeepMind · 2026-10-23
- AI agents take macOS kernel vulns to root: an XNU exploit dev case study — moyix · 2026-10-23
- Wavelength SDK hits mainnet, letting humans and AI agents send bitcoin with a few API calls — RSync25 · 2026-10-23
- Scheduled weekly coding-agent research briefs across Claude Code, Codex, Grok & Gemini — umeshonai · 2026-10-23
- Vercel Agent investigates deployments read-only, then asks for permissions before fixing — kmiddleton14 · 2026-10-23
- Leaving two AI agents to chat overnight produced hilarious mutual profiles — StellaLisy · 2026-10-23