← Azimuth Daily
Capturing data…
Capturing data…
SUN, 25 OCT · 77 ITEMS
"Backdoored LiteLLM package on PyPI installs credential stealer" — Hacker News (best) · AI & Technology
A malicious version 1.107.0 of the package—a popular Python proxy for multi‑model LLM APIs—was uploaded to and Docker Hub on October 21, 2026. The backdoor installs a .pth file that runs automatically when Python starts, stealing credentials (API keys, cloud tokens) from the affected machine and also periodically loading remote code for further exploitation.
Highly solid, corroborated by multiple primary sources: the official LiteLLM security advisory, Wiz’s incident analysis, and package integrity logs from PyPI. The reporting directly references the malicious wheel files and Docker images, with independent reverse‑engineering confirming the and remote loader.
Genuinely new as of October 21, 2026, when the backdoored version was published and identified.
We covered a prior LiteLLM supply‑chain compromise in March 2026 by the threat actor TeamPCP, which used stolen PyPI credentials to push backdoored versions (1.82.7/1.82.8) — a distinct earlier incident from this October 2026 event.