Tagged

Python

Python and PyPI security incidents, from compromised releases to startup-hook malware, with indicators and remediation steps.

1 post

October 26, 2026 · 6 min read

LiteLLM 1.107.0: a leaked key, a hijacked release pipeline, and a stealer that ran every time Python started

On October 21, a malicious version of the popular LiteLLM Python package reached PyPI and Docker Hub. LiteLLM's own post-mortem traces it back to a key leaked in May. A detailed look at the attack chain, how to check your systems, and what to rotate.

Cybersecurity

Python