Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

LiteLLM version 1.107.0 was compromised and distributed via PyPI and official container images on October 21, 2026. The malicious package used Python startup hooks to automatically execute credential-stealing payloads without requiring explicit import of LiteLLM. Attackers stole developer GitHub credentials to redirect release workflows to a fake repository. The payload targeted authentication credentials across developer tools, AI applications, cloud environments, browsers, and infrastructure. Credentials were encrypted and exfiltrated to attacker-controlled servers. The compromise affected developer workstations, CI/CD agents, test systems, containers, and LiteLLM gateway deployments where Python was executed.

• LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI CredentialsMalware2026-10-21
• ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software VendorsMalware2026-10-22
• LiteLLM supply chain compromiseCampaign2026-10-22
• Inside a Global AI-Assisted Hacking CampaignMalware2026-10-22
• Midnight Mimosa Malware Campaign Exploits Android Firmware Supply ChainMalware2026-10-20