LiteLLM release pipeline hacked to distribute credential-stealing malware

Summary

Hackers hijacked the release pipeline of LiteLLM, an open-source AI gateway, and distributed version 1.107.0 through PyPI and official Docker images on October 21 carrying credential-stealing malware. According to Aikido, the bundled files ran automatically when Python started, even without importing LiteLLM, and collected cloud credentials and API keys from LiteLLM's database. The package also contained a remote access trojan that fetched and executed code from attacker-controlled infrastructure every hour.

Mitigation

LiteLLM advised organizations running the compromised open-source software to treat their environments as potentially breached and rotate exposed credentials rather than relying solely on removing the malicious package.

Related items

• MediumChinese hackers spied on thousands of companies after breaching IT giant ConnectWiseSimilar attack · TechCrunch (Security)
• MediumOpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLSimilar attack · The Hacker News
• HighCVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()Similar attack · AWS Security Bulletins
• MediumAI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseSimilar attack · Microsoft Security Blog
• MediumLiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI CredentialsSimilar attack · Socket Blog