LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM on Wednesday disclosed that threat actors compromised multiple independent security controls to push a malicious version of the Python package containing a credential stealer and a backdoor On October 21 2026 LiteLLMs release pipeline was compromised to push 11070 to the Docker Hub registry and the Python Package Index PyPI repository The incident took place around 400 am