LiteLLM 1.107.0 supply chain attack steals credentials via PyPI and Docker images
2026-10-21 | incident | economic, reputational
Our take
The AI gateway held the keys to everything and handed them over on install. Ollama servers with no authentication were also available, for the attackers in a hurry.
The facts
A supply chain attack compromised the LiteLLM AI gateway (version 1.107.0), distributing malware via PyPI and Docker images. The malicious code stole cloud, AI, and SSH credentials and enabled remote code execution. Attackers also hijacked exposed LiteLLM and Ollama servers due to lack of authentication, leading to unauthorized access and further attacks.