A wide array of sensitive credentials, including those for AWS and Google Cloud, were targeted by a compromised release of a Python library used to connect AI model providers. PyPI and Docker Hub have now deleted the affected version 1.107.0 of the LiteLLM gateway to block an infostealer and remote access trojan. The malware specifically sought access to Kubernetes, Vault, and Terraform secrets, as well as private keys for SSH and TLS and accounts for Hugging Face, Claude, and Gemini.
The breach affected all seven compiled wheels across Windows, macOS, and Linux and triggered automatically at Python startup regardless of whether the library was imported. Security firms JFrog and Socket identified the attack, with Socket flagging the malicious release within seven minutes of its publication. Users of the tool, which sees more than 92M monthly downloads, are advised to isolate infected systems and rotate all secret keys using a clean device.
