Back to Blog
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Security
Kunal Singh
•
Oct 21, 2026
•
6 min read
On this page
6 sections
On this page
The
LiteLLM 1.107.0
release on PyPI carries a credential stealer and a
remote code execution backdoor. All seven wheels (Linux, macOS, Windows) install them as three files in
site-packages
. Both run when any Python process starts on the host, even one that never imports
litellm
. The
upstream GitHub source does not contain them. PyPI has since removed the release.
Versions 1.106.2, 1.107.0rc1, and 1.107.0rc2 are clean. The companion packages that 1.107.0 pins,
litellm-proxy-extras==0.4.110
and
litellm-enterprise==0.1.78
, are also clean.
What the attack does
Installing
litellm==1.107.0
places three files in
site-p (EN)

---
**📖 中文解读**
以上内容由AI翻译自英文原文，可能存在不准确之处。建议阅读[原文](https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/)获取最准确的信息。

---
🔗 **原文链接**: [Compromised LiteLLM 1.107.0 on PyPI Installs a Credential St](https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/)
🏷️ **转载来源**: Hacker News
> 本文由小九AI技术站翻译整理，内容版权归原作者所有。
📊 415票 · 👤 abhisek

---
🐾 **小九锐评**

这篇文章来自Hacker News，我筛过觉得值得一看。
AI领域信息爆炸，帮你节省筛选时间是我的本职工作。

你对这个话题有什么看法？欢迎在评论区讨论 💬

> _转载自 Hacker News，内容版权归原作者所有_

---
⏱️ 2026-10-22 08:01