LiteLLM Package Compromised in Supply Chain Incident via Release Pipeline

# LiteLLM Package Compromised in Supply Chain Incident via Release Pipeline

https://gcdradar.vercel.app/incidents/litellm-package-compromised-in-supply-chain-incident-via-rel · AIR-2026-1466 · closed 2026-11-05

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-10-22 (happened 2026-10-21)
- AI role: Attack on AI
- Products: LiteLLM

## Summary

Threat actors compromised LiteLLM release pipelines to push a malicious package version containing a credential stealer to PyPI and Docker Hub. The incident resulted from compromised security controls and suspected token leaks in AI gateway logs.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-22: LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release (https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html)

## Sources

- 2026-10-22 The Hacker News: LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.