## LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

- 種別: news
- 関連技術: python, docker
- 公開日時: 2026-10-21T18:01:57.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-d9304dd4f7f5

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the