Infostealer and backdoor found in LiteLLM version 1.107.0

On October 21, 2026, the release pipeline of the AI gateway LiteLLM was compromised, and within hours PyPI, Docker Hub, and GHCR distributed version 1.107.0 containing infostealers and backdoors. The attackers did not modify the official repository's code; instead, they redirected the build to the impersonating repository Berri-AI/litellm, which differs by only one hyphen, causing the malicious package to be released under the official signature; according to LiteLLM's analysis, the entry point was a platform master key that had remained unrevoked since it leaked in May. The article recommends confirming whether 1.107.0 was ever run, deleting the malicious files and rebuilding the environment on 1.106.2, rotating all kinds of keys from a clean host, and pinning versions and hashes and switching to short-lived tokens.