New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack

Socket’s Threat Research team found that a malicious secret-exfiltration workflow was already running successfully in the BerriAI/litellm repository on October 10, 2026, eleven days before the release-pipeline attack that published malicious litellm==1.107.0 artifacts, placing observed malicious activity in the repository more than a week before the compromise came to light. What Socket Found # The compromise of the BerriAI/litellm release pipeline on October 21, 2026, which produced malicious litellm==1.107.0 wheels on PyPI and a malicious container image, has been documented separately. This