Malicious LiteLLM 1.107.0 build pulled from PyPI and Docker Hub
Attackers pushed a malicious LiteLLM 1.107.0 build to PyPI and container registries on Oct. 21, 2026, pulled the same day. Startup files ran with installer permissions, so credentials on affected machines stay valid until rotated.