LiteLLM has been compromised again via a supply chain attack, with the malicious release litellm@1.107.0 affecting PyPI packages and Docker images
LiteLLM has been compromised again via a supply chain attack, with the malicious release litellm@1.107.0 affecting PyPI packages and Docker images. The injected malware executes automatically during Python execution.
- Protocols
- LiteLLM
- Confidence
- High
- First seen
- 22 Oct 2026, 03:58 UTC