LiteLLM 1.107.0 on PyPI compromised with credential stealer and backdoor; malicious code runs at Python startup, targets SSH keys, cloud credentials, AI tokens across all platforms.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

• Oct 21, 2026 • 6 min read The LiteLLM 1.107.0 release on PyPI carries a credential stealer and a remote code execution backdoor. All seven wheels (Linux, macOS, Windows) install them as three files in site-packages. Both run when any Python process starts on the host, even one that never imports litellm. The upstream GitHub source does not contain them. PyPI has since removed the release. Versions 1.106.2, 1.107.0rc1, and 1.107.0rc2 are clean. The companion packages that 1.107.0 pins, ...