Attackers publish a backdoored LiteLLM release and container images
Attackers compromised LiteLLM’s 1.107.0 release and published PyPI wheels and Docker images containing a credential stealer and remote-code-execution backdoor on October 21, 2026. The malware ran at Python startup through planted files, including in processes…
