LiteLLM Release Pipeline Hijacked to Spread Credential-Stealing Malware

The release pipeline of open-source AI gateway LiteLLM was hijacked, with attackers distributing malicious version 1.107.0 via PyPI and official Docker images on October 21, the project's second supply chain compromise this year. The package executed automatically, stole cloud credentials and API keys, and included a remote access trojan that fetched commands hourly; LiteLLM said attackers used stolen GitHub credentials from three developer accounts to alter the release workflow, and the Python package was removed after about two hours.

• Respan launches open-source Rust AI gateway built around plugins2026-10-20
• Belgium's Aikido launches cybersecurity AI model2026-09-21
• Anthropic: AI agents struggle with CAPTCHAs2026-09-10