LiteLLM Says Attacker Published Malicious 1.107.0 for Two Hours
Summary
LiteLLM says attackers compromised its release pipeline and published litellm 1.107.0 to PyPI and Docker Hub with credential-stealing malware from 11:39 to 13:23 UTC on Oct 21. The packages are pulled. The company advises pinning to 1.106.2 and says enterprise registry customers were not affected.
Key Points
- LiteLLM says an attacker used a GitHub organization owner token to disable branch protections.
- LiteLLM reports Docker Hub's latest tag stays compromised until 14:20 UTC.
- LiteLLM schedules its next incident update for 22:30 UTC on Oct 21.