LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

T2Covered by 1 source · first reported by The Hacker News at 22 Oct, 08:28 UTC

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub…

devreleasessecurity

Sources

• T2LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package ReleaseThe Hacker News22 Oct, 08:28