LiteLLM attributed its latest supply chain attack to a master key exposed on GitHub on May 27, 2026, and left active for 136 days. On October 21, the intruder used the key to compromise continuous integration workflows and publish a malicious version 1.107.0 on PyPI and Docker registries. The software, which was removed after about two hours, was estimated to have been downloaded nearly 49,000 times and contained a credential-stealing component and a remote code execution backdoor. The malicious version activated automatically when Python started, without the library being imported, quickly exposing secrets stored in affected environments. Users of version 1.107.0 need to revoke and replace potentially compromised credentials, while this second attack of the year highlights the need to audit old deployments and revoke unused keys.
Source: Read the original article
