claude-news
newsBleepingComputer·23 Oct 2026·Bill Toulas

LiteLLM release pipeline hacked to distribute info-stealer malware

Attackers compromised LiteLLM release pipeline and shipped PyPI packages and Docker images with credential stealers.

Extract

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]