Supply Chain Compromise of LiteLLM 1.107.0 Leads to Credential Theft via Python Startup Hooks
Attackers compromised the LiteLLM 1.107.0 open‑source package, using Python startup hooks to steal cloud credentials from downstream projects. The incident underscores the need for continuous third‑party risk monitoring and immutable evidence of code provenance for audit readiness.
ADTP Breach Watch· October 23, 2026· Microsoft Security Blog
Check if you use it. This incident came through a third party or the supply chain. If the product or supplier is in your estate or your vendors', start with the questions to ask below.
What happened
A malicious actor injected code into the LiteLLM 1.107.0 release that leveraged Python’s startup‑hook feature to capture API keys and tokens from any application that imported the library. Microsoft’s security research team identified the supply‑chain breach and issued guidance.
Why it matters for trust and compliance
The incident illustrates why organizations must maintain continuous oversight of third‑party components, generate SBOMs, and retain verifiable evidence of code integrity to satisfy control‑assurance requirements across frameworks.
Continuous monitoring of upstream dependencies provides defensible evidence for audit readiness.
Documented vendor‑risk assessments and credential rotation policies address control objectives around supply‑chain security.
Who is affected
Technology SaaS providersCloud infrastructure teamsDevelopers using Python LLM libraries
Recommended actions
Create and maintain an up‑to‑date SBOM for all software assets.
Implement hash‑based verification and code‑signing for third‑party packages.
Set up automated alerts for unexpected changes in upstream repositories.
Revoke and rotate any potentially exposed credentials immediately.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.