LiteLLM 1.107.0 Compromised Again: PyPI & Docker Supply Chain Attack Explained
Category: Cybersecurity News | Supply Chain Security | AI Security | Published: October 23, 2026 | Reading time: about 14 minutes It happened again. On October 21, 2026, attackers pushed a malicious LiteLLM release, version 1.107.0 , to both PyPI and the project’s official Docker registries. LiteLLM is the gateway library that routes requests to OpenAI, Anthropic, Google and dozens of other model providers, with roughly 23 million weekly downloads. This is the second time in 2026 that its release path has been hijacked, and it is a different kind of attack from the first. In March, a poisoned security scanner leaked a publishing token. This time, according to LiteLLM’s own report, the attackers stole the GitHub credentials of three engineers and used the project’s legitimate release pipeline to ship malware. The malicious version reportedly carried both an infostealer and a remote access trojan. It was live for about two hours, which is more than eno...