Unknown attackers compromised the LiteLLM open-source AI gateway release process on October 21, 2026, distributing malicious version 1.107.0 through PyPI and Docker registries.