Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Published 2026-10-23T18:12:19Z•e59453f60e664209b160a583e921885514fce35c3ab0a9a7ebd0b7782122c57f

Source metadata

Publication date
2026-10-23T18:12:19Z
Source identifier
https://www.microsoft.com/en-us/security/blog/?p=150238
Public record ID
record:sha256:e59453f60e664209b160a583e921885514fce35c3ab0a9a7ebd0b7782122c57f

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
microsoft_security_blog
Record identifier
e59453f60e664209b160a583e921885514fce35c3ab0a9a7ebd0b7782122c57f
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.

Record · Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks · Baitaphish