{"slug": "litellm-s-compromised-release-workflow-sent-credential-stealing-malware-to-pypi", "title": "LiteLLM's compromised release workflow sent credential-stealing malware to PyPI and Docker", "summary": "LiteLLM's release pipeline was compromised on October 21st, publishing version 1.107.0 with credential-stealing malware to PyPI and container registries, according to BleepingComputer. The attack used a lookalike source repository and credentials from three developer accounts; LiteLLM suspects OAuth tokens leaked through logs in an internet-exposed deployment but has not confirmed how that deployment was accessed. The open-source AI gateway, built by co-founders Krrish Dholakia and Ishaan Jaffer, sits beside model-provider keys and cloud credentials, so the compromised release exposed users who installed or ran version 1.107.0 to theft of those secrets.", "body_md": "# LiteLLM's compromised release workflow sent credential-stealing malware to PyPI and Docker\n\n**The October 21st attack used a lookalike source repository and credentials from three developer accounts to publish version 1.107.0. LiteLLM suspects OAuth tokens leaked through logs in an internet-exposed deployment, but has not confirmed how that deployment was accessed.**\n\n        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)\n        · Published \n\nPrimary source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/)\n\n## Why it matters\n\nAn AI gateway can sit beside model-provider keys, cloud credentials and deployment secrets. This attack showed how a compromised release workflow can carry malware through trusted software distribution and into environments holding those assets, even when the application's own code is untouched.\n\n[LiteLLM](https://litellm.ai/?ref=runtimewire)'s release pipeline published malware to PyPI and container registries on October 21st, putting credentials and secrets at risk for users who installed or ran version 1.107.0. Co-founders Krrish Dholakia and Ishaan Jaffer built the open-source AI gateway to give developers one interface for calling multiple model providers. The compromised release turned that trusted point of access into a potential route to customers' cloud accounts, AI keys and developer environments.…\n\nWhen you purchase through links in our articles, [we may earn a small commission](https://runtimewire.com/affiliate-monetization-standards). This doesn’t affect our editorial independence.", "url": "https://wpnews.pro/news/litellm-s-compromised-release-workflow-sent-credential-stealing-malware-to-pypi", "canonical_source": "https://runtimewire.com/article/litellm-release-pipeline-supply-chain-attack-october-2026", "published_at": "2026-10-22 20:04:37+00:00", "updated_at": "2026-10-22 23:10:03.065555+00:00", "lang": "en", "topics": ["ai-safety", "ai-infrastructure", "ai-tools", "ai-agents"], "entities": ["LiteLLM", "BleepingComputer", "PyPI", "Krrish Dholakia", "Ishaan Jaffer"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/litellm-s-compromised-release-workflow-sent-credential-stealing-malware-to-pypi", "markdown": "https://wpnews.pro/news/litellm-s-compromised-release-workflow-sent-credential-stealing-malware-to-pypi.md", "text": "https://wpnews.pro/news/litellm-s-compromised-release-workflow-sent-credential-stealing-malware-to-pypi.txt", "jsonld": "https://wpnews.pro/news/litellm-s-compromised-release-workflow-sent-credential-stealing-malware-to-pypi.jsonld"}}