LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer

# LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer

https://gcdradar.vercel.app/incidents/litellm-compromised-in-supply-chain-attack-delivering-creden · AIR-2026-1458 · closed 2026-11-10

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-10-21
- AI role: Attack on AI
- Products: LiteLLM

## Summary

The LiteLLM Python package version 1.107.0 was compromised via PyPI and Docker images to distribute a credential stealer and backdoor. The malicious package has since been quarantined by PyPI.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-27: Investigation reveals the supply chain attack originated from an exposed master key. (https://theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544)
- 2026-10-23: LiteLLM Compromised in Fresh Supply Chain Attack (https://securityweek.com/litellm-compromised-in-fresh-supply-chain-attack)
- 2026-10-21: LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor (https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html)

## Sources

- 2026-10-21 The Hacker News: LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html
- 2026-10-23 SecurityWeek: LiteLLM Compromised in Fresh Supply Chain Attack https://securityweek.com/litellm-compromised-in-fresh-supply-chain-attack
- 2026-10-27 The Register: LiteLLM supply chain attack started with an exposed master key https://theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.