"Users who downloaded an unpinned version of LiteLLM between 11:39 a.m. and 1:23 p.m. UTC via pip or used the Docker image v1.107.0, latest, main-latest, or main-stable between 11:46 a.m. and 2:20 p.m. UTC are impacted."
LiteLLM, from yesterday: Contained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised https://docs.litellm.ai/blog/security-incident-oct-21-2026
More:
The Hacker News: LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html @thehackernews #GitHub #infosec #Docker
docs.litellm.aiContained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised | liteLLMLiteLLM release v1.107.0 was compromised by a malicious actor.