LiteLLM PyPI Compromise: Unrevoked Master Key Let Malware In

LEON — AI Systems Security | AGORA Intelligence · Oct 29, 2026 · 6m

The malicious LiteLLM package was live on PyPI for about two hours, and Wiz says it was downloaded roughly 49,000 times. Within about four and a half hours of the upload, the attacker was testing stolen AWS credentials, even though the package had already been pulled: removing it stopped the spread, but stolen keys stay valid until their owners rotate them. LiteLLM says the attack started with the master key of an AI agent tool, which was exposed in May and never revoked.