[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUBmicRzJp-EdSZMAib1bKwR3MZSJknED_wLcAGOS_50":3},{"article":4,"iocs":53,"watch_terms":57,"solutions":58,"lesson":152},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"047c1bb8-7c63-4bff-af87-ccab80242c06","LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor","litellm-compromised-in-supply-chain-attack-delivering-credential-stealer-and-bac-d9304d","The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the","The popular LiteLLM Python package was compromised in a supply chain attack distributing credential stealer and backdoor malware through PyPI wheels and Docker images, affecting version 1.107.0. The malicious package has been quarantined on PyPI following reports from SafeDep, Socket, StepSecurity, and Upwind. This incident highlights ongoing risks in the Python ecosystem where compromised dependencies can reach thousands of downstream projects and applications.","LiteLLM Python package compromised via PyPI with credential stealer and backdoor in v1.107.0","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Flitellm-compromised-in-supply-chain.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEg-f1TsJE93kcT5Cp1wvKlnR-bCWFP9ZUZofd0PXryxRBt0B1q0-t0BaHnEJcNhy3IhRZq2fBU9fmILshSvlY-qk28TOO-f1JoBcGSRtwiC3MIV4gDxdXYzTS_ZMirtPka7UaG9Shie7kgWKzauZOwKgPvk8hHXUTFly2YXpzBuxUD20MdxBfKeXrRsIG-W\u002Fs1600\u002Flitellm-hack.jpg","2026-10-21T18:01:57+00:00","2026-10-21T20:00:11.846697+00:00",9,[17,20,23,25,28,30],{"name":18,"type":19},"LiteLLM","product",{"name":21,"type":22},"PyPI","technology",{"name":24,"type":22},"Docker",{"name":26,"type":27},"SafeDep","vendor",{"name":29,"type":27},"Socket",{"name":31,"type":27},"StepSecurity","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":32,"icon":34,"name":35,"slug":36},null,"Supply Chain","supply-chain",[38,43,48],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":42,"value":55,"context":56},"LiteLLM v1.107.0","Compromised package version distributed via PyPI and Docker containing credential stealer and backdoor",[26,29,31],{"controls":59,"vendors":146},[60,89,117],{"slug":61,"name":62,"problem":63,"products":64},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":52,"name":90,"problem":91,"products":92},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"slug":118,"name":119,"problem":120,"products":121},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",[147],{"slug":148,"name":29,"logo_path":149,"roles":150},"socket","\u002Fvendor-logos\u002Fsocket.png",[151],"reported_by",{"slug":153,"title":154,"body":155,"framework_refs":156,"framework_notes":164},"litellm-pypi-package-poisoned-with-credential-stealer-and-backdoor","LiteLLM PyPI Package Poisoned with Credential Stealer and Backdoor","The LiteLLM Python package (version 1.107.0) was compromised in a supply chain attack, embedding credential-stealing malware and a backdoor into both PyPI wheels and Docker images. Because thousands of downstream projects depend on LiteLLM, a single poisoned release created an enormous blast radius before it was quarantined. This incident underscores a systemic risk in open-source ecosystems: developers implicitly trust upstream packages, and malicious actors exploit that trust to distribute malware at scale. Without proactive integrity verification and dependency monitoring, organizations may unknowingly deploy compromised code into production environments.",[157,158,159,160,161,162,163],"CIS Control 7: Continuous Vulnerability Management","OWASP A06:2021 Vulnerable and Outdated Components","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 17: Incident Response Management",{"NIS2 Article 21(2)(b)":165,"NIST SP 800-53 SI-2: Flaw Remediation":166,"CIS Control 17: Incident Response Management":167,"OWASP A06:2021 Vulnerable and Outdated Components":168,"CIS Control 7: Continuous Vulnerability Management":169,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":170,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":171},"NIS2 requires supply chain security measures; this incident demonstrates exactly the kind of third-party software risk that entities must address through supplier vetting and integrity controls.","SI-2 requires organizations to identify, report, and remediate flaws in information system components, which includes malicious or compromised software packages from external sources.","A defined incident response plan enabled rapid coordination between SafeDep, Socket, StepSecurity, and Upwind to quarantine the package; organizations without such processes face delayed containment and greater exposure.","This attack directly exploits the risk of using unverified third-party components; OWASP A06 specifically calls for integrity verification and continuous monitoring of dependencies in the software supply chain.","Continuous monitoring of third-party dependencies for known vulnerabilities and malicious versions would have flagged LiteLLM 1.107.0 before it reached production systems.","This control mandates timely identification and remediation of technical vulnerabilities in software, including third-party and open-source components used within the organization.","The credential-stealing component of this attack targeted stored secrets and API keys; enforcing least-privilege access and rotating credentials limits the damage a stealer can cause."]