A Popular AI Package Was Backdoored on PyPI, and It Ran in Every Python Process on Your Machine
This story is from 2026-10-25. It is preserved in the archive; the latest stories are on the live feed.
On October 21, 2026, version 1.107.0 of LiteLLM landed on PyPI with a credential stealer and a remote code execution backdoor baked in. All seven wheels - Linux, macOS, and Windows - installed them as three files in site-packages. Both payloads ran whenever any Python process started on the host, e…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-25 19:55 · DEV Community — AI
A Popular AI Package Was Backdoored on PyPI, and It Ran in Every Python Process on Your Machine