LiteLLM's compromised release workflow sent credential-stealing malware to PyPI and Docker

LiteLLM's release pipeline was compromised on October 21st, publishing version 1.107.0 with credential-stealing malware to PyPI and container registries, according to BleepingComputer. The attack used a lookalike source repository and credentials from three developer accounts; LiteLLM suspects OAuth tokens leaked through logs in an internet-exposed deployment but has not confirmed how that deployment was accessed. The open-source AI gateway, built by co-founders Krrish Dholakia and Ishaan Jaffer, sits beside model-provider keys and cloud credentials, so the compromised release exposed users who installed or ran version 1.107.0 to theft of those secrets.

LiteLLM's compromised release workflow sent credential-stealing malware to PyPI and Docker The October 21st attack used a lookalike source repository and credentials from three developer accounts to publish version 1.107.0. LiteLLM suspects OAuth tokens leaked through logs in an internet-exposed deployment, but has not confirmed how that deployment was accessed. By RuntimeWire Staff https://runtimewire.com/author/runtimewire-staff · Published Primary source: BleepingComputer https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/ Why it matters An AI gateway can sit beside model-provider keys, cloud credentials and deployment secrets. This attack showed how a compromised release workflow can carry malware through trusted software distribution and into environments holding those assets, even when the application's own code is untouched. LiteLLM https://litellm.ai/?ref=runtimewire 's release pipeline published malware to PyPI and container registries on October 21st, putting credentials and secrets at risk for users who installed or ran version 1.107.0. Co-founders Krrish Dholakia and Ishaan Jaffer built the open-source AI gateway to give developers one interface for calling multiple model providers. The compromised release turned that trusted point of access into a potential route to customers' cloud accounts, AI keys and developer environments.… When you purchase through links in our articles, we may earn a small commission https://runtimewire.com/affiliate-monetization-standards . This doesn’t affect our editorial independence.