Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
- • Oct 21, 2026 • 6 min read The LiteLLM 1.107.0 release on PyPI carries a credential stealer and a remote code execution backdoor.
- All seven wheels (Linux, macOS, Windows) install them as three files in site-packages.
- Both run when any Python process starts on the host, even one that never imports litellm.
Unverified
- • Oct 21, 2026 • 6 min read The LiteLLM 1.107.0 release on PyPI carries a credential stealer and a remote code execution backdoor.
- All seven wheels (Linux, macOS, Windows) install them as three files in site-packages.
- Both run when any Python process starts on the host, even one that never imports litellm.
Sources: Safedep