CYBERSECURITYTRACKER
Permanent story citation

LiteLLM supply chain compromise: What you need to know

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10988

As cited

Copy frozen at (site build).

threat intel

LiteLLM supply chain compromise: What you need to know

LiteLLM versions 1.107.0 containing malicious code were published to PyPI and container registries after attackers compromised multiple maintainer accounts. The supply chain attack affects developers and organizations using the affected release.

Why it matters: Teams running LiteLLM v1.107.0 face immediate risk of compromised dependencies and potential remote code execution; verify your deployment version and pull from trusted sources.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

LiteLLM supply chain compromise: What you need to know

LiteLLM versions 1.107.0 containing malicious code were published to PyPI and container registries after attackers compromised multiple maintainer accounts. The supply chain attack affects developers and organizations using the affected release.

Why it matters: Teams running LiteLLM v1.107.0 face immediate risk of compromised dependencies and potential remote code execution; verify your deployment version and pull from trusted sources.

VendorsAmazon Web ServicesAppleDockerGitHubGoogleKubernetesMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

LiteLLM supply chain compromise: What you need to know

LiteLLM versions 1.107.0 containing malicious code were published to PyPI and container registries after attackers compromised multiple maintainer accounts. The supply chain attack affects developers and organizations using the affected release.

Why it matters: Teams running LiteLLM v1.107.0 face immediate risk of compromised dependencies and potential remote code execution; verify your deployment version and pull from trusted sources.

VendorsAmazon Web ServicesAppleCiscoDockerGitHubGoogleKubernetesMicrosoftSalesforce
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

LiteLLM supply chain compromise: What you need to know

LiteLLM versions 1.107.0 containing malicious code were published to PyPI and container registries after attackers compromised multiple maintainer accounts. The supply chain attack affects developers and organizations using the affected release.

Why it matters: Teams running LiteLLM v1.107.0 face immediate risk of compromised dependencies and potential remote code execution; verify your deployment version and pull from trusted sources.

VendorsAmazon Web ServicesAppleCiscoDockerGitHubGoogleKubernetesMicrosoftOpenSSLSalesforce
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary