LiteLLM 1.107.0: check where it ran
LiteLLM confirmed malicious PyPI and container artifacts. Removing the package does not revoke credentials it could access.
- Vendor
- LiteLLM
- Exposure
- Affected package must execute
- Vendor severity
- See original advisory
What happened
Search deployment records, image digests and CI caches. Determine whether the affected artifact actually executed and which secrets were reachable. Installation history alone does not establish what was accessed.
The vendor identifies malicious artifacts in public distribution channels. Its incident report distinguishes those artifacts from the official GitHub source and private enterprise registry. Consult the vendor timeline for the affected download windows.
Treat execution on a host as a compromise investigation. Revoke credentials at the issuer and review associated sessions and usage. Rebuilding the application does not invalidate an exposed key.
The vendor warns that starting Python or pip in an affected environment can execute the payload again through startup files. Use a clean environment for investigation and recovery.
Affected systems and fixes
| Product | Affected | Fixed release / action |
|---|---|---|
| PyPI package | litellm 1.107.0 | Vendor recommends 1.106.2 |
| Container images | 1.107.0 and moving tags during the incident window | Use a verified clean image digest |
Confirm the running version against the vendor advisory, including any distribution backports.
Response checklist
Sources
Technical facts come from these sources. Priorities and suggested reviews are Oktsec’s analysis.
- October 21 supply chain incidentLiteLLM · vendor · Checked Oct 23, 2026 UTC
Editorial record3 entries
Initial local draft. Malicious distribution confirmed by the vendor; customer impact requires investigation.
Added the response priority rationale and original disclosure date.
Clarified the vendor warning against running Python or pip in an affected environment, and included this incident in AI and cloud credential coverage.
Choose what to review
Get incident alerts and briefings
Act now incidents and team briefings, with sources and recommended actions.
Checking availability…