Unverified50% confidenceFactExact time
The backdoor establishes a persistent remote control channel, allowing attackers to issue commands, download secondary payloads or move laterally; even if the victim rotates the leaked keys, the backdoor can still re-harvest new credentials.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
LiteLLM 1.107.0 Caught in Supply Chain Attack: Credential Stealer and Backdoor Planted in PyPI Package
hackernewshackernews10/21/2026
Related Entities
Related Claims
UnverifiedThe combination of a credential stealer and a backdoor means a two-stage risk: first silently exfiltrating keys, then retaining a remote control channel.75% similarVerifiedThe forward secrecy mechanism dynamically generates temporary session keys for each session, ensuring that even if a user's long-term private key is compromised, attackers cannot retroactively decrypt historical messages.72% similarUnverifiedAttackers can exfiltrate sensitive information out of the sandbox through legitimate outbound channels by embedding malicious code in dependency packages (supply chain attacks).70% similarUnverified攻击者获取refresh_token后即可持续刷新获得新访问权限，即便用户修改密码，已泄露Token在过期前仍可被持续滥用，这称为会话劫持69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081545API
curl https://kongchang.com/api/v1/knowledge/claims/1081545MCP
get_claim(id=1081545)