{"data":{"id":"639149ab-8d57-428d-a6c1-e4417c9da0c5","title":"LiteLLM release pipeline hacked to distribute credential-stealing malware","summary":"Hackers hijacked the release pipeline of LiteLLM, an open-source AI gateway, and distributed version 1.107.0 through PyPI and official Docker images on October 21 carrying credential-stealing malware. According to Aikido, the bundled files ran automatically when Python started, even without importing LiteLLM, and collected cloud credentials and API keys from LiteLLM's database. The package also contained a remote access trojan that fetched and executed code from attacker-controlled infrastructure every hour.","solution":"LiteLLM advised organizations running the compromised open-source software to treat their environments as potentially breached and rotate exposed credentials rather than relying solely on removing the malicious package.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4239033/litellm-release-pipeline-hacked-to-distribute-credential-stealing-malware.html","publishedAt":"2026-10-22T12:07:08.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LiteLLM","Claude Code","PyPI","Docker","GitHub","Kubernetes","GitLab","Jenkins"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-22T12:07:08.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}