LiteLLM Discloses Malicious 1.107.0 Artifacts on PyPI, Docker Hub and GHCR

Key Info

LiteLLM's Director of Security reported that malicious LiteLLM 1.107.0 artifacts were published to PyPI, Docker Hub and GHCR at approximately 4:40 a.m. PDT, and were detected at 6:32 a.m. PDT. The malicious releases and images have been removed, and incident coordination is happening in a linked GitHub issue.

Highlights

• Malicious 1.107.0 artifacts appeared on PyPI, Docker Hub and GHCR around 4:40 a.m. PDT.
• LiteLLM became aware of the incident at 6:32 a.m. PDT.
• Enterprise deployments pulling only from the private registry are unaffected.
• Users who installed or ran the artifacts should follow remediation guidance in the GitHub issue and treat accessible credentials as exposed.