{"slug": "litellm-hit-by-second-supply-chain-attack-this-year-users-urged-to-rotate", "title": "LiteLLM hit by second supply chain attack this year, users urged to rotate credentials", "summary": "A malicious release of LiteLLM published to PyPI and Docker registries on Wednesday carried malware designed to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it, marking the second supply chain compromise of LiteLLM this year after an earlier attack in March. Security researcher Kevin Beaumont wrote on Mastodon that \"LiteLLM got compromised… again,\" and Hudson Rock's analysis of a 153GB archive stolen in the March incident linked it to 2,488 corporate domains, including AWS, Samsung, Cisco and Salesforce. Users are being urged to rotate credentials.", "body_md": "A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised… again,” security researcher Kevin Beaumont wrote on Mastodon. In August, Hudson Rock analyzed a 153GB archive stolen during an earlier LiteLLM supply chain attack, in March, and linked it to 2,488 corporate domains, including AWS, Samsung, Cisco and Salesforce, … [More](https://www.helpnetsecurity.com/2026/10/22/litellm-compromised-supply-chain-attack-pypi-docker/) \n\nThe post [LiteLLM hit by second supply chain attack this year, users urged to rotate credentials](https://www.helpnetsecurity.com/2026/10/22/litellm-compromised-supply-chain-attack-pypi-docker/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/litellm-hit-by-second-supply-chain-attack-this-year-users-urged-to-rotate", "canonical_source": "https://www.helpnetsecurity.com/2026/10/22/litellm-compromised-supply-chain-attack-pypi-docker/", "published_at": "2026-10-22 13:10:28+00:00", "updated_at": "2026-10-22 13:14:51.575798+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "ai-infrastructure", "developer-tools"], "entities": ["LiteLLM", "PyPI", "Docker", "Kevin Beaumont", "Hudson Rock", "AWS", "Samsung", "Cisco"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/litellm-hit-by-second-supply-chain-attack-this-year-users-urged-to-rotate", "markdown": "https://wpnews.pro/news/litellm-hit-by-second-supply-chain-attack-this-year-users-urged-to-rotate.md", "text": "https://wpnews.pro/news/litellm-hit-by-second-supply-chain-attack-this-year-users-urged-to-rotate.txt", "jsonld": "https://wpnews.pro/news/litellm-hit-by-second-supply-chain-attack-this-year-users-urged-to-rotate.jsonld"}}