LiteLLM 1.107.0 compromised via malicious Python startup hooks

# LiteLLM 1.107.0 compromised via malicious Python startup hooks

https://gcdradar.vercel.app/incidents/litellm-1-107-0-compromised-via-malicious-python-startup-hoo · AIR-2026-1489 · closed 2026-11-06

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-10-23
- AI role: Attack on AI
- Products: LiteLLM

## Summary

Threat actors compromised the LiteLLM 1.107.0 release to execute remote code and steal credentials through Python startup hooks. Microsoft Threat Intelligence detailed the attack vectors along with detections and mitigation steps.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-23: Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks (https://microsoft.com/en-us/security/blog/2026/10/23/inside-the-litellm-1-107-0-supply-chain-compromise-credential-theft-through-python-startup-hooks)

## Sources

- 2026-10-23 Microsoft Security: Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks https://microsoft.com/en-us/security/blog/2026/10/23/inside-the-litellm-1-107-0-supply-chain-compromise-credential-theft-through-python-startup-hooks

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.