← All reports

The LiteLLM 1.107.0 package on PyPI was compromised, installing a credential stealer and backdoor.

CybersecurityTechnologyConflictOct 21, 2026score 0.272 posts · 0 replies across 2 instances
The thread discusses the compromise of LiteLLM 1.107.0 on PyPI, which installs a credential stealer and backdoor, raising security concerns. The incident is linked to a news article and a HN comment, highlighting the vulnerability of software repositories and the risks of credential theft.

Claims

The LiteLLM 1.107.0 package on PyPI was compromised, installing a credential stealer and backdoor.
Parent: CybersecurityEntity: LiteLLMSub-entity: PyPI packageImpact: negativeDate: Oct 21, 2026 - Oct 22, 2026Target: Security of software repositories

Source posts

@[email protected]
And now LiteLLM has been compromised... AGAIN https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
0 boosts · 0 favs · 0 replies · Oct 21, 2026
@[email protected]
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/ https://news.ycombinator.com/item?id=50181114
0 boosts · 0 favs · 0 replies · Oct 21, 2026
@[email protected]
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor | Hacker News https://news.ycombinator.com/item?id=50181114
0 boosts · 0 favs · 0 replies · Oct 22, 2026