Compromised LiteLLM 1.107.0 steals credentials via Python startup
Starting Python with the package installed can run PRIVCOLLECT without importing LiteLLM; removing the package does not recover credentials.
88
Malware
privcollect
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenOct 21, 2026
- Last mentioned2d ago
Timeline
3 articles · newest firstLiteLLM 1.107.0 release carried credential-stealing malware
Malicious Python startup hooks can collect cloud and AI credentials even when applications never import LiteLLM.
78
Malicious LiteLLM 1.107.0 ships stealer and backdoor
PyPI quarantined the release and Docker images were removed; users should pin 1.106.2 and rotate exposed credentials.
76
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.