LiteLLM release pipeline compromised to push credential-stealing package

· Cybersecurity

LiteLLM disclosed that threat actors compromised multiple independent security controls to push a malicious version of its Python package containing a credential stealer and a backdoor, according to reports Wednesday. On October 21, 2026, the project's release pipeline was used to publish version 1.107.0 to the Docker Hub registry and PyPI, along with malicious Docker images that steal credentials, secrets and environment variables. LiteLLM suspects a GitHub token leak in its AI gateway logs was behind the compromise. LiteLLM is a widely used gateway for routing requests to different AI models, so developers who pulled the package exposed API keys and internal system credentials. The incident adds to a run of software supply chain compromises hitting developer tooling.

Why it matters：Developer tooling for AI applications has become a prime supply chain target, and a compromise at a widely used model gateway spreads credential theft across many organizations at once.

Key points

  • Version 1.107.0 was published to Docker Hub and PyPI on October 21, 2026.
  • The payload steals credentials, secrets and environment variables.
  • LiteLLM suspects a GitHub token leak in its AI gateway logs.

Sources (original reporting)

More stories from this day