open source security

LiteLLM 1.107.0 Was Trojanized: How to Check If You Were Hit

October 31, 2026October 25, 2026 by Shoaib Hassan

Illustration: a dark server room at night, a glowing open package box with a cracked seal, shadowy code tendrils pulling glowing key-shaped glyphs toward a distant shadowed server rack, one amber warning light flaring

In brief A trojanized LiteLLM 1.107.0 release stole cloud credentials and AI API keys on October 21, 2026. How to tell if you’re affected and exactly what to rotate first. On October 21, 2026, a trojanized version of LiteLLM — the open-source AI gateway with roughly 23 million weekly downloads — was distributed through PyPI … Read more