🧰 LiteLLM 1.107.0 on PyPI

The items that name it 4

• SecureChap (@SecureChap) on X
  thread2026-10-22It is written here as litellm 1.107.0 on PyPI (eight malicious wheels and a tampered tarball, all built after the compromise).

  eight malicious wheels and a tampered tarball, all built after the compromise

• LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
  writeup2026-10-21It is written here as LiteLLM 1.107.0 on PyPI (all seven wheels across macOS, Linux and Windows; about 23M weekly downloads for the package).

  all seven wheels across macOS, Linux and Windows; about 23M weekly downloads for the package

• LiteLLM 1.107.0 PyPI Wheel Contains a Credential Stealer and Persistent Python Backdoor
  writeup2026-10-21It is written here as LiteLLM 1.107.0 on PyPI: all seven wheels contain the same three injected files per Upwind; payload absent from the v1.107.0 git tag.
• LiteLLM supply chain compromise: What you need to know
  writeup2026-10-21It is written here as litellm 1.107.0 on PyPI (malicious release, available for approximately two hours on 21 October 2026).

  malicious release, available for approximately two hours on 21 October 2026