LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM reported that threat actors breached multiple security controls to release a malicious version of a Python package. The package contained a credential stealer and a backdoor. The compromise occurred on October 21, 2026, at around 4:00 a.m., allowing the malicious package version 1.107.0 to be pushed to the Docker Hub registry and the Python Package Index repository. LiteLLM suspects that a GitHub token leak in AI gateway logs may be connected to the incident. The malicious package was successfully released through LiteLLM's compromised release pipeline.