Cybersecurity News
Filters
Filtered by category: Cybersecurity News, tag: litellm × Clear
LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
Matched: Claude
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, with attackers embedding a credential stealer and remote access trojan in all seven wheel files and associated Docker images. The malware uses Python startup hooks to run automatically, stealing SSH keys, cloud credentials, browser passwords, and AI tool tokens, sending data to an attacker-controlled endpoint. PyPI removed the release, but stolen credentials remain valid until rotated. Version 1.106.2 is considered safe.