Case litellm-1-107-0-trojanized-releaseAI supply chainWorldwide
Malicious LiteLLM 1.107.0 on PyPI and Docker steals browser, cloud and AI secrets
Wiz reports a malicious LiteLLM 1.107.0 uploaded to PyPI and Docker on October 21, with a stealer for browser, cloud and AI secrets and a dormant C2.
HighAttack on AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 21, 2026
- Location
- Worldwide
- Target
- LiteLLM users on PyPI and Docker
- Severity
- High
- Verification
- Reported by credible press or researchers
- Triggered by
- Unknown
- Actor type
- Unknown
- Sector
- Technology & AI vendors
- Reported loss
- None reported
- CVE
- None
What happened
Wiz reports a malicious LiteLLM 1.107.0 uploaded to PyPI and Docker on October 21, with a stealer for browser, cloud and AI secrets and a dormant C2.
Impact: Credentials for browsers, cloud and AI services are exposed to anyone who installed the version; the number of victims is unknown.
Who triggered it
Actor: Unknown
Attribution: Wiz Research reported the incident; the summary names no actor and does not link it to the earlier LiteLLM compromise.
Motive: Credential theft, judging by the stealer; not stated.
How it happened
Attack vector: Trojanized package version published to PyPI and Docker, containing a credential stealer and a dormant C2 capability.
Root cause: Unknown; the summary does not say how the malicious version was published.
Timeline
- Reported by Wiz Research
Response
Wiz Research published an advisory; the summary gives no remediation details.
Current status: Contained
Research warnings this case matches
- Seen in real incidents AI systems themselves become targets · International AI Safety Report
- Seen in real incidents Privacy and security · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- Wiz Research wiz.io
- LiteLLM (BerriAI) security incident post docs.litellm.ai
- Chainguard chainguard.dev
Cite this case
Malicious LiteLLM 1.107.0 on PyPI and Docker steals browser, cloud and AI secrets. AI Threat Watch, case litellm-1-107-0-trojanized-release, Oct 21, 2026. https://aithreat.io/cases/litellm-1-107-0-trojanized-release/
Permanent link: https://aithreat.io/cases/litellm-1-107-0-trojanized-release/
Related cases
The same type of incident, most recent first.