---
type: "post"
id: "contained-oct-21-2026-litellm-release-v1-107-695e77"
slug: "contained-oct-21-2026-litellm-release-v1-107-695e77"
title: "Contained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised (11 minute read)"
description: "LiteLLM said its release pipeline was compromised on October 21, 2026 and that malicious LiteLLM v1.107.0 artifacts were published to PyPI and container registries."
retrieval_nugget: "LiteLLM said its release pipeline was compromised on October 21, 2026 and that malicious LiteLLM v1.107.0 artifacts were published to PyPI and container registries."
published_at: "2026-10-22"
updated_at: "2026-10-22"
record_date: "2026-10-22"
date_kind: "published_at"
topics: ["github"]
entities: ["LiteLLM","PyPI","Docker Hub","GitHub Container Registry","GitHub"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "same_event"
what_changed: "Same event as LiteLLM опять взломали Версия LiteLLM 1.107.0 отправит хакерам ваши пароли из браузеров и ключи доступа к AI-сервисам."
prior_refs: ["memory:762e7b13-38f8-8d5c-aec7-0436fcabda39","memory:23c02952-20f8-814c-a72d-32a449ecdf35"]
source_url: "https://docs.litellm.ai/blog/security-incident-oct-21-2026"
source_urls: ["https://docs.litellm.ai/blog/security-incident-oct-21-2026"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:contained-oct-21-2026-litellm-release-v1-107-695e77"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/contained-oct-21-2026-litellm-release-v1-107-695e77/","markdown":"https://newruntime.com/posts/contained-oct-21-2026-litellm-release-v1-107-695e77.md","json":"https://newruntime.com/posts/contained-oct-21-2026-litellm-release-v1-107-695e77.json"}
---

# Contained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised (11 minute read)

## Retrieval answer

LiteLLM said its release pipeline was compromised on October 21, 2026 and that malicious LiteLLM v1.107.0 artifacts were published to PyPI and container registries.

LiteLLM said its release pipeline was compromised on October 21, 2026 and that malicious LiteLLM v1.107.0 artifacts were published to PyPI and container registries. The company said the compiled malware stole credentials and loaded remote-code-execution tools. Earlier LiteLLM versions were described as safe, and the affected artifacts were removed.

All seven PyPI wheels for `litellm==1.107.0` were live from 11:39:51 to 13:23 UTC. Docker Hub tags `v1.107.0`, `latest`, `main-latest`, and `main-stable` pointed to a compromised image index from 11:46:56 to 14:20 UTC; equivalent GHCR tags were also affected. LiteLLM says its private enterprise registry was not affected and advises exposed users to rebuild environments, pin to 1.106.2 or an earlier explicit version, and rotate reachable credentials.

The report says the official GitHub v1.107.0 source tag did not contain the malicious files and that artifacts were built from an attacker-controlled repository. It does not establish the number of users or systems compromised, the attacker identity, or the extent of credential exfiltration. Source: https://docs.litellm.ai/blog/security-incident-oct-21-2026

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Github](https://newruntime.com/topics/github.md): Explore the github topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)