LiteLLM 1.107.0 supply chain compromise: credential theft triggered by just starting Python
yuridiogenes · x · 2026-10-24
Microsoft Security researchers detail the compromised LiteLLM 1.107.0 release, which added files executed automatically during Python interpreter initialization — apps didn't need to import LiteLLM; starting Python in an affected environment was enough to trigger the payload.
Two execution paths were analyzed:
- A credential collector targeting authentication material across developer tools, cloud environments, browsers, and infrastructure
- A Unix-oriented loader capable of retrieving and executing additional Python code
Endpoint observations on Windows and macOS matched the collector's discovery, encryption, and outbound behavior. Investigators are advised to avoid running Python or pip during evidence collection.
More from coding & agent
- Claude keeps hiding its edit/delete/history tools — it wants a curated context, not more control — repligate · 2026-10-24
- GitHub dev installs his Super Mona platformer onto the Universe 2026 badge with a single Copilot prompt — martinwoodward · 2026-10-24
- Spreadsheet MCP Server Lets LLMs Read and Write Google Sheets Directly — modelcontextprotocol · 2026-10-24
- After 1000 Hours With Claude, This Creator Compiled His Complete Three-Level Guide Collection — rubenhassid · 2026-10-24
- Modal clones its own employee: open-weight models give LiveKit agents a video avatar — charles_irl · 2026-10-24
- How Do You Verify an AI Agent Finished Its Task and Actually Stopped? — csforgeai · 2026-10-24