LiteLLM reports release pipeline compromised, pushing v1.107.0 to PyPI and Docker from a lookalike repository
LiteLLM's official incident post states that on October 21, 2026 its release pipeline was compromised and pushed v1.107.0 to the PyPI package and Docker regist…
Published on MyPrivateClaw
Oct 22, 2026, 4:40 PM UTC
Coverage date
Oct 21, 2026
Last updated
Oct 22, 2026, 4:40 PM UTC
News summary
LiteLLM's official incident post reports that on October 21, 2026 the release pipeline was compromised and pushed v1.107.0 to the PyPI package and Docker registry. The malicious PyPI wheel litellm==1.107.0 was live from 11:39:51 to 13:23 UTC before being removed, and the Docker images v1.107.0, latest, main latest and main stable were compromised from 11:46 UTC until 14:20 UTC, per the same record. Per the vendor record, the compromised artifacts were built from an attacker controlled lookalike repository named Berri AI/litellm rather than BerriAI/litellm. The official v1.107.0 source tag in the BerriAI/litellm repository does not contain the malicious files; the artifacts that shipped carried a cook.pth startup hook and sitecustomize.py that stole environment variables and credentials. LiteLLM's stated remediation advice is to redeploy pinned to litellm==1.106.2 and to rotate every cre…