---
title: "LiteLLM release pipeline hacked to distribute credential-stealing malware"
type: signal
url: https://frontiernewswire.com/s/litellm-release-pipeline-hacked-to-distribute-credential-stealing-5371b3ec
published: 2026-10-22T12:07:08.000Z
byline: "Source: CSO Online"
---

# LiteLLM release pipeline hacked to distribute credential-stealing malware

Source: CSO Online · Published 2026-10-22 · Canonical: https://frontiernewswire.com/s/litellm-release-pipeline-hacked-to-distribute-credential-stealing-5371b3ec

Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security measures introduced after an earlier attack. The compromised version, 1.107.0, was distributed through the Python Package Index (PyPI) and official Docker images on October 21. LiteLLM said the malicious Python packages remained available for approximately two hours before being removed, while the affected Docker images were withdrawn or replaced later that day. The affected Docker images included those distributed under the latest, main-latest, and main-stable tags, extending the risk to deployments that pulled those tags during the exposure window. According to cybersecurity firm Aikido , files bundled with the compromised package executed automatically when Python started, even if an application did not import LiteLLM. The malware was designed to collect sensitive inform

## Sources

- [Read the original at CSO Online](https://www.csoonline.com/article/4239033/litellm-release-pipeline-hacked-to-distribute-credential-stealing-malware.html)

## Related

- [Treasuries Surge as Global Worries Spark Rush to Safety](https://frontiernewswire.com/s/treasuries-surge-as-global-worries-spark-rush-to-safety-ed8e8188)
- [Chinese state media: DeepSeek and MiniMax completed registration and won approval to open-source and deploy AI models overseas under proposed export controls (Bloomberg)](https://frontiernewswire.com/s/chinese-state-media-deepseek-and-minimax-completed-registration-and-8835ab4a)
- [OpenAI suspected the three fired researchers of leaking internal model designs to AI safety researcher Ryan Greenblatt, including via disappearing Signal chats (Wall Street Journal)](https://frontiernewswire.com/s/openai-suspected-the-three-fired-researchers-of-leaking-internal-model-a5e0134c)
- [Ollama v0.40.9 is available](https://frontiernewswire.com/s/ollama-v0-40-9-is-available-6e7b7cbe)
- [FailSafe President on AI hacking, Cybersecurity](https://frontiernewswire.com/s/failsafe-president-on-ai-hacking-cybersecurity-c6438029)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)