Logo
pypi

litellm@1.107.0

Vulnerability report · Last retrieved from osv.dev October 21, 2026 at 11:29 PM UTC

Malicious

OSV ID

MAL-2026-2144

Ecosystem

pypi

Summary

LiteLLM was compromised through trivy security scan in a GitHub workflow. Attackers uploaded malicious versions of LiteLLM to PyPI. The malicious code would exfiltrate sensitive secrets to an attcker controlled domain.

Source: google-open-source-security (6a89401cbf53902e8374fbf3b424a77bb5e5f8c437176232eab7c3237d10ecbe)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES