LiteLLM disclosed that attackers compromised security controls to publish a malicious package version featuring a backdoor and credential stealer to PyPI and Docker Hub, affecting versions like v1.107.0 and tag builds on GHCR.

The incident occurred on October 21, 2026. The modified version of the program contained data interception and remote control functions. Specifically, the code searched for passwords and digital keys, while executing commands from an external server every hour, sending the stolen data to a remote address.

How did they get into the systems?

According to the company, a few days before the incident, the release rights of two internal engineers had been temporarily extended. The attackers gained access to three sets of developer digital keys, one of which had execution rights.…