Compromised LiteLLM release targeted cloud, developer and AI provider credentials
AI gateways concentrate keys for multiple model providers and cloud accounts in one component, so a two-hour window can still cause broad credential exposure across build systems and production containers. Any environment that pulled the affected version should rotate every secret it could reach, not only AI keys, and should check for persistence. The incident also strengthens the case for pinning dependencies, verifying images, and treating AI middleware with the same supply chain controls applied to payment or identity libraries.
What Happened
On 21 October 2026 attackers published a malicious version 1.107.0 of litellm, a Python proxy library for LLM providers with about 23 million weekly downloads; it was available on PyPI and in LiteLLM's official Docker images for roughly two hours before removal. The release installed a credential stealer that runs whenever Python starts, plus a second-stage remote access trojan. Socket reported that the malware targets cloud credentials, developer secrets and AI provider keys.
Why It Matters
AI gateways concentrate keys for multiple model providers and cloud accounts in one component, so a two-hour window can still cause broad credential exposure across build systems and production containers. Any environment that pulled the affected version should rotate every secret it could reach, not only AI keys, and should check for persistence. The incident also strengthens the case for pinning dependencies, verifying images, and treating AI middleware with the same supply chain controls applied to payment or identity libraries.
Sources
- Datadog Security Labs (opens in a new tab): LiteLLM supply chain compromise: What you need to know (2026-10-21)
- Socket (opens in a new tab): LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials (2026-10-21)
More From This Briefing
- CISA urges immediate patching of critical 'php2shell' PHP flaws leaked before a fix existed
- US, UK and German agencies issue joint #StopRansomware advisory on SafePay
- Nvidia unveils prefabricated DSX pods and waterless data centre specifications
- ISG study for Bermuda-based mea finds 86% of insurers would rework outsourcing deals for AI
This story is part of the Laurenceo Intelligence briefing for 22 October 2026, a daily sourced briefing on AI, technology and enterprise risk published in Bermuda by Laurenceo, founded by Jorai Laurenceo. It is produced by an automated research pipeline and checked before publication; how this is made. General information only, not legal, regulatory or financial advice.