Compromised LiteLLM 1.107.0 Steals Credentials, Loads Remote Code
Date Observed: October 21, 2026Ecosystem: PyPI (Python) and Docker (GHCR, Docker Hub)Targets: Hosts, CI runners, and LiteLLM proxy containers that installed litellm==1.107.0 or pulled the v1.107.0, latest, main-latest, or main-stable imagesAttack Type: Release pipeline takeover with stolen GitHub CLI OAuth tokens; Python startup-hook credential stealer and remote code loaderImpact: Theft of cloud, CI/CD, SSH, AI-tool, […]