Socket

LiteLLM reports that its 2026-10-21 release-pipeline compromise shipped version 1.107.0 to PyPI and public container registries with credential-stealing malware; the official source tag did not contain the malicious files. Its completed investigation, published on October 23, traces initial access to an unrevoked Agent Platform master key exposed in a public repository on May 27, followed by theft of an organization owner's GitHub token and additional maintainer tokens. This supersedes LiteLLM's initial hypothesis that the attacker obtained the tokens from internal LiteLLM response logs, which had implicated Claude Code.