LiteLLM version 1.107.0 was compromised and distributed via PyPI and official container images on October 21, 2026. The malicious package used Python startup hooks to automatically execute credential-stealing payloads without requiring explicit import of LiteLLM. Attackers stole developer GitHub credentials to redirect release workflows to a fake repository. The payload targeted authentication credentials across developer tools, AI applications, cloud environments, browsers, and infrastructure. Credentials were encrypted and exfiltrated to attacker-controlled servers. The compromise affected developer workstations, CI/CD agents, test systems, containers, and LiteLLM gateway deployments where Python was executed.