The Hacker News · 10/22/2026

LiteLLM Supply Chain Compromise: Malicious Python Package Delivers Credential Stealer

LiteLLM version 1.107.0 compromised on PyPI and Docker Hub. Attackers exploited GitHub token to push malicious payload with credential stealer and backdoor to SDK supply chain.

Read original coverage