{
  "id": 15928611,
  "title": "LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor",
  "url": "https://urgent.news/2026/10/21/litellm-compromised-in-supply-chain-attack-delivering-credential",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-21T18:01:57.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html"
  },
  "original_language": "en",
  "account": null,
  "summary": "The popular Python package LiteLLM has been compromised in a supply chain attack, delivering a credential stealer and a backdoor. The malicious release, distributed through PyPI wheels and Docker images, affects LiteLLM version 1.107.0. LiteLLM's director of security, Oliver Jensen, stated that the compromise was traced back to three engineers' GitHub accounts, which were accessed using stolen GitHub CLI OAuth tokens. The threat actor used one user's account to trigger the project-releaser run, and another user's account to approve it. All involved tokens have been revoked, and the malicious wheels have been quarantined on PyPI and removed from Docker images. The malware, equipped to collect cloud credentials, private keys, browser data, and authentication files for AI development tools, is launched by Python before LiteLLM is imported through a path file (cook.pth). The collected data is packaged into a GZIP-compressed TAR archive and sent to litellm.dev/healthcheck via an HTTP POST request.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}