LiteLLM has completed its investigation into the v107.0 supply chain attack that happened a few days ago:
- a master key was accidentally published on GitHub in May and never revoked
- an attacker used it to steal a GitHub organization owner's token, obtain more credentials, bypass protections and approve a malicious release
- LiteLLM's own release pipeline then signed and published v1.107.0 containing credential-stealing malware to PyPI and container registries
- the compromised releases were pulled shortly after
https://docs.litellm.ai/blog/security-incident-oct-21-2026-attack-chain
docs.litellm.aiThe attack chain behind the v1.107.0 LiteLLM release | liteLLMHow a master key committed to a public repository in May led to three stolen GitHub tokens and the compromised litellm v1.107.0 release, step by step.
commit 600e18a