Unverified50% confidenceFactExact time
The tampered LiteLLM 1.107.0 version executes additional logic at install time or runtime, targeting sensitive credentials stored in the environment (such as cloud provider access keys, model API Keys, database connection strings, and CI/CD deployment tokens).
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/21/2026
First Seen
Valid until: 11/4/2026
Sources
LiteLLM 1.107.0 Caught in Supply Chain Attack: Credential Stealer and Backdoor Planted in PyPI Package
hackernewshackernews10/21/2026
Related Entities
Related Claims
UnverifiedLiteLLM has a vulnerability GHSA-7hp6-4w63-5g45 with no assigned CVE ID (CVSS 9.9), affecting versions 1.91.0 to 1.100.4 as well as 1.101.0-1.101.2, 1.102.0-1.102.1, and 1.103.0, where any user with the internal_user role can escalate themselves to proxy administrator.64% similarUnverifiedThe release artifacts of langchain-core 1.6.5 are verified through a GitHub verified signature (GPG Key ID: B5690EEEBB952194).62% similarUnverifiedGitHub 用户 shiqs90 分享了一个在 Azure 上使用 Kubernetes 自托管 LLM 的端到端项目 vllm-serving-aks62% similarUnverifiedInstall the gateway with uv tool install 'litellm[proxy]' and start it with litellm --model gpt-4o, which listens on port 4000 by default.61% similarUnverifiedDify 1.0版本引入了插件化架构，将工具能力从平台核心解耦，通过Marketplace实现按需安装61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081543API
curl https://kongchang.com/api/v1/knowledge/claims/1081543MCP
get_claim(id=1081543)