Back to advisories

LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials

LiteLLM version 1.107.0 was compromised via supply chain attack using a lookalike GitHub repository to distribute malicious Python wheels and Docker images. Any organization running this version has credentials, API keys, and cloud secrets at risk of exfiltration through Python startup hooks that execute automatically without explicit imports. Immediate action required to identify affected systems and revoke compromised credentials.

CRITICALAdvisoryOct 22, 2026
Action required
Identify all systems running LiteLLM 1.107.0 in your environment immediately. Upgrade to patched version. Scan process execution logs and Python startup hooks for suspicious activity. Assume all cloud and API credentials used by affected systems are compromised and rotate them now.
Affected products
LiteLLMSocket (AI scanner)Upwind (security investigation)