LiteLLM Supply Chain Attack

LiteLLM

LiteLLM Python package compromised, delivering credential stealer and backdoor

Do this now

Check whether LiteLLM was installed and rotate any credentials it could access.

First seen: 21 Oct 2026
Last update: 23 Oct 2026, 08:42 UTC
Source: news
On the menu as: LLM gateways
PyPI packages

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## LiteLLM Supply Chain Attack
Severity: unknown. Patch status: fix status unknown.
Affected: LiteLLM

LiteLLM Python package compromised, delivering credential stealer and backdoor

## Steps
1. This incident involves a provider (ai-gateways). Search config, CI and env templates (.env.example, wrangler.toml, vercel.json, terraform, workflow secrets) for credentials stored there. List each secret by name, where it is used, and how to rotate it. Never print secret values.
2. There is no fix yet. Until one ships: LiteLLM Python package compromised, delivering credential stealer and backdoor

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html https://www.helpnetsecurity.com/2026/10/22/litellm-compromised-supply-chain-attack-pypi-docker/ https://www.securityweek.com/litellm-compromised-in-fresh-supply-chain-attack/ https://www.aikido.dev/blog/litellm-compromised-infostealer-rat https://socket.dev/blog/litellm-compromise?utm_medium=feed https://www.wiz.io/blog/litellm-compromised-steals-credentials https://www.theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548 https://www.stepsecurity.io/blog/litellm-1-107-0-compromised-pypi-backdoored-wheels-credential-stealer https://socket.dev/blog/litellm-attack-timeline?utm_medium=feed
https://pwned.coffee/i/litellm-supply-chain-attack

Timeline

23 Oct 2026, 16:17 UTC
The malicious version was uploaded to PyPI and Docker on October 21.
23 Oct 2026, 16:17 UTC
The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability.
23 Oct 2026, 08:42 UTC
Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
23 Oct 2026, 08:42 UTC
LiteLLM suspects GitHub token leak in AI gateway logs
23 Oct 2026, 08:42 UTC
China-linked hackers used ARTEX AI agents in ConnectWise supply chain attack
21 Oct 2026
First reported.

Receipt

Exploitation: No known exploitation
Score: No CVSS published yet: severity unknown.
Last checked: 24 Oct 2026, 17:17 UTC

Sources: KEV – CVE record – Vendor –

Sources

Totalone coffee