Malicious LiteLLM 1.107.0 release on PyPI contains backdoor
October 21, 2026
The LiteLLM 1.107.0 package on PyPI was found to contain a credential stealer and remote code execution backdoor. The malicious code executes in any Python process on the host, even without importing the library.
HOW THIS AFFECTS YOU
●
builderImmediately roll back to version 1.106.2 or use 1.107.0rc1/rc2 to avoid credential theft.