{"slug": "litellm-open-source-gateway-compromised-with-credential-stealing-malware-in", "title": "LiteLLM open-source gateway compromised with credential-stealing malware in second supply chain attack", "summary": "Attackers compromised LiteLLM's release pipeline and published version 1.107.0 to the PyPI package repository carrying credential-stealing malware, according to CSO Online and Wired. It is the second supply chain attack on the open-source AI gateway project within a single year, exposing enterprise deployments that use LiteLLM for model API management and governance.", "body_md": "# LiteLLM open-source gateway compromised with credential-stealing malware in second supply chain attack\n\nAccording to CSO Online and Wired, attackers compromised LiteLLM's release pipeline and distributed version 1.107.0 with credential-stealing malware via PyPI package repository. This marks the second supply chain attack on the open-source AI gateway project within a single year, exposing enterprise deployments that rely on LiteLLM for model API management and governance.\n\n## Topics\n\n## Sources\n\n- Press[Read article](https://www.csoonline.com/article/4239033/litellm-release-pipeline-hacked-to-distribute-credential-stealing-malware)\n- Press[Read article](https://www.wired.com/story/ai-guardrails-arent-stopping-criminal-hackers/)\n\n## Go deeper\n\nThis intelligence is sourced automatically from public sources across the web and synthesised by the Prefactor AI pipeline. Stories are reviewed before publication.", "url": "https://wpnews.pro/news/litellm-open-source-gateway-compromised-with-credential-stealing-malware-in", "canonical_source": "https://www.getreadyforagents.com/news/litellm-supply-chain-malware-credential-theft/", "published_at": "2026-10-23 19:06:37+00:00", "updated_at": "2026-10-25 14:12:34.077741+00:00", "lang": "en", "topics": ["ai-safety", "ai-infrastructure", "ai-tools", "mlops", "artificial-intelligence"], "entities": ["LiteLLM", "PyPI", "CSO Online", "Wired", "Prefactor"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/litellm-open-source-gateway-compromised-with-credential-stealing-malware-in", "markdown": "https://wpnews.pro/news/litellm-open-source-gateway-compromised-with-credential-stealing-malware-in.md", "text": "https://wpnews.pro/news/litellm-open-source-gateway-compromised-with-credential-stealing-malware-in.txt", "jsonld": "https://wpnews.pro/news/litellm-open-source-gateway-compromised-with-credential-stealing-malware-in.jsonld"}}