The popular LiteLLM Python package has been compromised in a software supply chain attack. The attack delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.
The compromise affects LiteLLM version 1.107.0, which was distributed through PyPI wheels and Docker images. The Python package has since been quarantined on the Python Package Index (PyPI).
Sources and references
Original report
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 00XNGU1N
Cite this
APA
Interestana AI Editorial. (2026, October 21). LiteLLM Compromised in Supply Chain Attack. Interestana. https://interestana.com/articles/litellm-compromised-in-supply-chain-attack-delivering-credential-stealer-and-backdoor-00xngu1n
MLA
“LiteLLM Compromised in Supply Chain Attack.” Interestana, 21 Oct. 2026, interestana.com/articles/litellm-compromised-in-supply-chain-attack-delivering-credential-stealer-and-backdoor-00xngu1n.
Chicago
Interestana AI Editorial. “LiteLLM Compromised in Supply Chain Attack.” Interestana, October 21, 2026. https://interestana.com/articles/litellm-compromised-in-supply-chain-attack-delivering-credential-stealer-and-backdoor-00xngu1n.
BibTeX
@misc{interestana_00xngu1n,
author = {{Interestana AI Editorial}},
title = {{LiteLLM Compromised in Supply Chain Attack}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/litellm-compromised-in-supply-chain-attack-delivering-credential-stealer-and-backdoor-00xngu1n},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html}
}Credit the source
Original reporting: The Hacker News, “LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor”, https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe