Contained: The October 21, 2026 LiteLLM v1.107.0 release was compromised
LiteLLM's release pipeline was compromised on October 21, and attackers pushed v1.107.0 containing credential-stealing and remote code execution malicious code to PyPI and Docker Hub; the official statement said affected builds have been taken down and the incident contained. The malicious litellm==1.107.0 was live on PyPI for about two hours (11:39 to 13:23 UTC), and the v1.107.0, latest, main-latest and main-stable tags on Docker Hub pointed to the contaminated image from 11:46 to 14:20 UTC; the official v1.107.0 source tag on GitHub does not contain the malicious files. Enterprise private versions were not affected, and the official recommendation is for open-source users to pin the version to 1.106.2 and rotate reachable credentials such as IAM roles, provider keys and DATABASE_URL passwords.
It fully discloses the chain by which attackers bypassed a hardened release pipeline, and provides steps for checking affected versions and rotating credentials, so teams using LiteLLM can self-check accordingly.