- 24th October 2026
LiteLLM was backdoored for the second time this year. Version 1.107.0 shipped a credential stealer in all seven PyPI wheels and the official Docker images, including latest. The attacker drove BerriAI’s own release pipeline with GitHub tokens scraped from gateway logs. No CVE exists, so CVE-based scanners see nothing.
Francesco Cipollone


















