Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential... by detente18 on Wednesday October 21, 2026 @09:24PM (#50189947)

Hi atmosx - i would recommend upgrading.

We work hard on improving the stability and security of LiteLLM on each release.

Please let me ([email protected]) know if you have any issues upgrading!

[ Parent | on HN ]

Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential... by prepend on Thursday October 22, 2026 @09:47AM (#50195274)

Isn't the issue with upgrading the insecurity of litellm and its inability to prevent being pwned?

How did you address this issue?

[ Parent | on HN ]

Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential... by atmosx on Friday October 23, 2026 @08:32AM (#50207964)

Will absolutely do. Sorry for my remarks, I wasn’t thinking straight. I appreciate your work.

Will upgrade ASAP. Thanks for the amazing product and best of luck with everything.

[ Parent | on HN ]