LiteLLM, downloaded 92 million times a month, compromised again; malware runs "even without importing"

LiteLLM, a Python package that lets one codebase call many AI models, shipped malware that steals cloud credentials, according to a warning from supply-chain security firm Socket.

Per Socket on Oct 21, LiteLLM version 1.107.0 delivered the malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets and AI tools. "The malware runs at Python startup, even without importing LiteLLM," Socket said, adding that the release workflow built container images from a lookalike repository. Socket said it flagged all seven malicious wheels within seven minutes of publication.

LiteLLM has more than 92 million monthly downloads. Socket's warning passed 1,500 likes on X, followed by a string of "AGAIN?" replies. A Japanese developer noted it was the second compromise since March.

Landing the same day as the PHP flaw, it prompted one commenter on Eric Parker's PHP video to ask, "can we just go like 24 hours in peace" (158 likes).