LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
LiteLLM Python package compromised via PyPI with credential stealer and backdoor in v1.107.0
Run SafeDep?
Get an email when a reviewed story names SafeDep, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
The popular LiteLLM Python package was compromised in a supply chain attack distributing credential stealer and backdoor malware through PyPI wheels and Docker images, affecting version 1.107.0. The malicious package has been quarantined on PyPI following reports from SafeDep, Socket, StepSecurity, and Upwind. This incident highlights ongoing risks in the Python ecosystem where compromised dependencies can reach thousands of downstream projects and applications.
The lesson from this incident
Full lessonThe LiteLLM Python package (version 1.107.0) was compromised in a supply chain attack, embedding credential-stealing malware and a backdoor into both PyPI wheels and Docker images. Because thousands of downstream projects depend on LiteLLM, a single poisoned release created an enormous blast radius before it was quarantined. This incident underscores a systemic risk in open-source ecosystems: developers implicitly trust upstream packages, and malicious actors exploit that trust to distribute malware at scale. Without proactive integrity verification and dependency monitoring, organizations may unknowingly deploy compromised code into production environments.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
- malware — LiteLLM v1.107.0