LiteLLM's maintainers say a malicious litellm==1.107.0 was live on PyPI for about two hours, from 11:39 to 13:23 UTC, and that four Docker tags (v1.107.0, latest, main-latest, main-stable) pointed at a compromised image until 14:20 UTC.…
In the News: October 23, 2026 (Extra)
LiteLLM's own account of its compromised release says the attacker found developer GitHub tokens in a gateway's logs, and names Claude Code as a source.
Extra edition
Machine-readable
Download Markdown
Story
LiteLLM says leaked agent tokens in gateway logs led to its compromised release
Read story →
Security Disclosure: Wednesday October 21st
Railway says an unauthorized third party may have accessed encrypted environment variables and decrypted some of them, and that it believes this is part of attacks on platform companies aimed at AI inference providers. It told upstream providers to revoke keys, paused all deployments, and recommends rolling every environment variable stored in Railway. This reflects the post as published on October 21; later status updates were not read.