LiteLLM withdraws a compromised package and container release

What happened

LiteLLM confirmed that attackers used stolen maintainer credentials to publish a malicious 1.107.0 release on 21 October. The identified package and container tags were withdrawn that day.

The vendor’s completed 23 October investigation traces access to an exposed Agent Platform master key that remained valid, followed by theft of GitHub credentials and abuse of the release workflow. PyPI quarantined the release by 13:23 UTC on 21 October; Docker Hub tags were removed or repointed by 14:20 UTC. Withdrawal contains those distribution routes. Systems that ran the artifacts require separate investigation and credential remediation.