PyPI · disclosed 21 October 2026
LiteLLM 1.107.0 release-pipeline compromise
Stolen maintainer GitHub tokens were used to run LiteLLM's real release pipeline against a lookalike fork. The 1.107.0 PyPI wheels and Docker images planted a credential stealer and an hourly remote code loader. PyPI served the bad release for about two hours on 21 October.
- Detectable by a website scanNo, server-side only
- Last reviewed24 October 2026
Affected packages
| Package | Affected versions |
|---|---|
litellm | 1.107.0 |
What to do
- Server-side only. If you run LiteLLM, check whether 1.107.0 or a Docker image pulled on 21 October was installed, and rotate every credential that machine could reach.
Sources
- LiteLLM: security incident, 21 Oct 2026
- Socket: LiteLLM PyPI package and Docker images compromised
- Datadog Security Labs: LiteLLM compromised
We update this page as new information is published. Package versions are also checked live against OSV.dev during every audit, so newly flagged versions are caught even before this page changes.