organisation

LiteLLM

open-source AI gateway project

Security · 22 Oct 2026LiteLLM release pipeline hacked, malicious packages distribute info-stealing malware

Hackers compromised the release pipeline of LiteLLM, a popular open-source AI gateway, pushing malicious PyPI packages and Docker images that steal credentials, secrets and environment variables. The supply-chain attack, detected on October 21, affected version 1.107.0 across all platforms, though the project's private enterprise customers were not impacted.