Security AlertHigh
LiteLLM supply chain attack pushed malicious packages to PyPI and Docker
Oct 23, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Hackers used stolen GitHub CLI OAuth tokens to publish malicious LiteLLM packages. People who installed version 1.107.0 during the attack window were exposed to malware.
Key points
- Malicious packages were online for about three hours on October 21.
- More than 49,000 downloads are estimated.
- The clean version is 1.106.2.
Why it matters
If your team uses LiteLLM, this could affect development systems, secrets and cloud credentials. A supply chain attack can spread quickly through trusted package tools, so software teams and small businesses should check installs carefully.
Who’s affected: LiteLLM users who installed version 1.107.0
What to do
- Remove LiteLLM version 1.107.0.
- Rotate credentials and keys.
- Sweep systems for malware.
- Move to version 1.106.2.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.