LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

On October 21, 2026, LiteLLM's release pipeline was compromised, resulting in a malicious version (1.107.0) being pushed to both Docker Hub and PyPI. Threat actors bypassed multiple independent security controls to inject a credential stealer and backdoor into the package. LiteLLM suspects that a GitHub token leaked via AI gateway logs may have been the initial attack vector. The incident occurred around 4:00 a.m. and represents a significant supply chain attack targeting AI/ML tooling infrastructure. Users who downloaded or used the compromised version may have had credentials stolen or systems backdoored.