Unknown attackers compromised the LiteLLM open-source AI gateway release process on October 21, 2026, distributing malicious version 1.107.0 through PyPI and Docker registries.

From the articleLiteLLM supply-chain attack targets credentials and installs a RAT | МежаAlso in LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor, LiteLLM supply chain attack hoovers up passwords and secrets