LiteLLM supply chain attack hoovers up passwords and secrets
2026-10-21
TheRegister.com
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A supply chain attack compromised the LiteLLM AI gateway (version 1.107.0), distributing malware via PyPI and Docker images. The malicious code stole cloud, AI, and SSH credentials and enabled remote code execution. Attackers also hijacked exposed LiteLLM and Ollama servers due to lack of authentication, leading to unauthorized access and further attacks.[AI generated]
Why's our monitor labelling this an incident or hazard?
The compromised LiteLLM package is an AI system interface that was maliciously altered to include malware stealing sensitive credentials related to AI and cloud services. The attack directly led to harm by exposing secrets and enabling remote code execution, which fits the definition of an AI Incident due to violations of rights and harm to property and communities. The presence of the AI system is explicit, and the harm is realized, not just potential. Therefore, this event is classified as an AI Incident.[AI generated]