LiteLLM 1.107.0 was malware; check if you installed it on 21 October
Sorted AI22 OctAttackers pushed a poisoned LiteLLM release, version 1.107.0, to PyPI and LiteLLM's Docker images on 21 October. LiteLLM is a popular open-source library and proxy that routes calls to many AI providers. The bad PyPI package was live from 11:39 to 13:23 UTC (17:09 to 18:53 India time), and the Docker tags v1.107.0, latest, main-latest and main-stable were affected from 11:46 to 14:20 UTC (17:16 to 19:50 India time); the malware steals credentials and loads remote-code tools. LiteLLM says earlier versions are safe and its private enterprise release was not hit. It believes the attacker used developer GitHub CLI tokens taken from the logs of an internal LiteLLM deployment that was exposed to the internet.
Why it matters: If any server, container or laptop installed LiteLLM without a pinned version, or pulled those Docker tags, in that window, treat it as compromised: follow LiteLLM's clean-up steps (do not run pip first), pin 1.106.2, rebuild, and rotate every key it could reach, including AI provider keys. Either way, pin versions of AI libraries instead of pulling latest.
LiteLLM ↗AI-assisted, reviewed by Sorted AI
▲ 0
0 comments