Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
On October 21, 2026, LiteLLM version 1.107.0 was compromised and distributed through PyPI and official container images. The malicious package leveraged Python startup mechanisms to execute credential-stealing payloads automatically, without requiring applications to actively import LiteLLM. Attackers utilized stolen developer GitHub credentials to redirect the release workflow to a lookalike repository. The payload targeted authentication material across developer tools, AI applications, cloud environments, browsers, and infrastructure. Two execution paths were identified: a credential collector launched through path extensions and a Unix-oriented loader persisted through site-specific configuration. Collected credentials were encrypted using AES-256-CBC with RSA-wrapped keys and exfiltrated to attacker-controlled infrastructure. The compromise affected not only LiteLLM gateway deployments but also developer workstations, CI/CD agents, test systems, and containers where Python was executed in affected env...
Pulse ID: 6adbc9083a47da5843e87e6a
Pulse Link: https://otx.alienvault.com/pulse/6adbc9083a47da5843e87e6a
Pulse Author: AlienVault
Created: 2026-10-23 20:52:24
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#Python #Credential #SupplyChain #Cloud #OTX #AlienVault