Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
The 1.107.0 release of the LiteLLM package on PyPI was found to contain a credential stealer and remote code execution backdoor injected via modified build configurations. The malicious code executes automatically upon Python startup if installed, though upstream GitHub sources remain clean and PyPI has removed the compromised version.
Why it matters
Illustrates ongoing software supply chain security risks within open-source package repositories, threatening projects that pull dependencies automatically.
Back to Blog Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor Security Kunal Singh • Oct 21, 2026 • 6 min read On this page 6 sections On this page
Protect your projects from malicious packages
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in