LiteLLM release pipeline hacked to distribute info-stealer malware
2026-10-22T19:23:21Z•80153f914296e363cbfa37b902c8d84e189a4cd42ab1947e4a717600aeb32b31
DockerLiteLLMPyPIcredential-theftenvironment-variable-theftinformation-stealerrelease-pipeline-compromisesecret-exfiltrationsoftware-distributionsupply-chain-compromise
What happened
BleepingComputer reports that the LiteLLM project's release pipeline was compromised. Attackers tampered with the PyPI package and published malicious Docker images containing an information-stealing payload designed to harvest credentials, secrets, and environment variables. This is a high-impact software supply-chain compromise affecting users who install or deploy the poisoned artifacts.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 80153f914296e363cbfa37b902c8d84e189a4cd42ab1947e4a717600aeb32b31
- Enrichment time
- 2026-10-22T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.