LiteLLM 1.107.0 was poisoned for two hours: check your Python environments
On 21 October 2026 attackers published a malicious LiteLLM 1.107.0 to PyPI and to the project's Docker images. The payload ran every time Python started, even when LiteLLM was never imported, and sent cloud, AI and developer credentials to a lookalike domain. The release was pulled within hours. Any environment that installed it stays compromised until it is cleaned and its secrets are rotated.