Official company update
LiteLLM 1.107.0: Stopping a Poisoned Package Before It Installs
Publisher preview
Most credential stealers search a laptop for whatever they can find. The one shipped in LiteLLM 1.107.0 knew exactly where to look. LiteLLM Proxy keeps upstream provider keys in a Postgres table, and the malware ran a query against that table to pull up to 500 of them. That is the risk with an LLM gateway. Its job is to hold provider and cloud credentials in one place, so one poisoned install can expose many of them at once. And this payload didn’t stop at stealing. It also carried a loader built to download and run more code later. This post covers what happened on October 21, where LiteLLM tends to show up, and how Cycode helps, starting at the developer workstation where the install happens. LiteLLM 1.107.0 was malicious on PyPI and in the official Docker images. The last safe version is 1.106.2. BerriAI, the company behind LiteLLM, says the attacker used stolen GitHub CLI OAuth tokens from three engineers. One account triggered the release workflow and another approved it.
A saved ApplyDjinn digest is not available for this story yet.
This preview is supplied by the publisher. The complete publication remains at its original source.
Request a correction or removalApplyDjinn context
What else is visible for Cycode?
These are observations in our catalog around the company, not claims made by the article. A publication does not establish why hiring, search interest, or share prices moved.
Current roles
0
30-day current-market scope
Company stories · 30d
11
11 official · 0 independent
Attention records · 7d
0
0 Google · 0 Polymarket
Coverage mix
Attention sources
No matching record in this window.
Open roles
0
Technical roles
0 of 0
Observed hiring change
-5 roles
Hiring and market history
Daily vacancy snapshots show this company’s observed hiring; no standalone public ticker is assigned.
Vacancy history
Current role mix
0 technical · 0 other
0% of currently observed roles are technical.
Vacancy history uses saved daily snapshots through 2026-11-01. News counts are dated publications; attention counts are matched records, not search volume or prediction probabilities.