criticalSupply chainpatchedCVSS 9.121 Oct 2026
LiteLLM
An AI package downloaded 3.4 million times a day, poisoned
What happened
A compromised release of the LiteLLM Python package shipped a credential stealer. The package runs inside application processes, so it can read every key the process can read.
Timeline
21 Oct 2026 · 22:10 UTC
Poisoned release
A malicious build is published to the package index.22 Oct 2026 · 01:25 UTC
Yanked
The release is removed after maintainers review the diff.22 Oct 2026 · 08:00 UTC
Credential sweep
Reports of stolen cloud keys begin arriving from CI runners.
Sources