The LiteLLM supply-chain attack: what happened and how to protect your Python and Docker projects
A malicious LiteLLM 1.107.0 was published to PyPI and Docker on October 21, 2026 and stole credentials from every machine that installed it. How the attack worked, how to check if you're affected, what to rotate, and the habits that stop the next one.
Security6 min
