Container-Images

vulnerabilities 2026-10-25
LiteLLM 1.107.0 Backdoored on PyPI and Docker: Python Startup-Hook Stealer Hits AI Gateway Deployments
A malicious LiteLLM 1.107.0 release on PyPI and Docker registries installed a startup-hook credential stealer and an hourly remote code loader. Anything that ran it should be treated as compromised.
supply-chain pypi credential-theft container-images ci-cd cloud

LiteLLM 1.107.0 Backdoored on PyPI and Docker: Python Startup-Hook Stealer Hits AI Gateway Deployments