Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
18 IOCs

litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader

Step Security
Step Security
Published October 22, 2026Original Report

Excerpt

litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader - StepSecurity Skip to main content Platform Platform Overview Dev Machine Guard Code Repo Security Secure Registry CI/CD Security Threat Intel Customers Pricing Resources Blog Product Tour Dev Machine Guard on GitHub Harden Runner on GitHub GitHub Actions Audit Documentation Company About Us Newsroom Trust Center Request a Demo Login Platform Platform Overview…

Read the original report →

Indicators of Compromise

Open the mindmap →

18 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA2562befe2a79fb4fbbd9a543b5b40b530c8cffa8771bab22b8fb22b2e4ae3b1f819MediumScore 53/100First seen
SHA2561bbce8caa94f01c0aaa0b7ddae51553a8a32e1ce53d96d44fe583272aff7ad00HighScore 64/100First seen
SHA2567f191632e7320705d154b85204f1ae546b543acbd7e8861229b76f5042b92bdbHighScore 68/100First seen
SHA256c2e32d0ce2548aa662c18bf5001911a79fe5b30cf8357132275add02fdcde054HighScore 64/100First seen
SHA2560aaf7ba346d41ef2f40390436738b001180d5a1c03aa093f121078a9969d9a1aHighScore 64/100First seen
SHA2569dd0a3926f96a37eb86cf1ee2310d9be93139cc4ebef3ef9e2efe9531390be25HighScore 68/100First seen
SHA256b6122440d0d9cb1eb1ade9933f49214da8c31288de7710c076c2680dfa528465HighScore 61/100First seen
SHA256bd1aeee419ea36da9aa2b657288da4101887be468f020ac63d22ba6ed84a3ea5HighScore 61/100First seen
SHA2561bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339eHighScore 64/100First seen
SHA19cf97e935aeaf791b9c8db224a2bb3ee156134ceMediumScore 53/100First seen
SHA25612d4ccc5c6f8d35cf4f2cf233b7f3e418e863e657d81ff5f5fc9e210005b9484HighScore 64/100First seen
SHA120535d8fa11f786a6c24df7488a0e449ed5f09adHighScore 56/100First seen
SHA256462d0c9f67ca522d9e0e4acd245e90b36ce0d5353604a66bb7c43a1ec4a6fcf7HighScore 64/100First seen
SHA25634bef04fe88ac9d0aae0475630b1738681d15b94f233ac8aa46eacf5968305faHighScore 68/100First seen
SHA25603ac2a8b752605d1d7710979c17ff18b03dd978203ba23ba97fd8ce3d6f897eaHighScore 61/100First seen
SHA256668169d35b87bf51324080390b1b1c5ab12bd335cfe5f1a99e3689abd5e02ae6HighScore 64/100First seen
SHA2567598727f209d717041db37f7dca271d3a7d328a279890e0e1d55375729aeb86dHighScore 68/100First seen
SHA25684dc8c82c0a4a4a62552ef826b49fcc86d1a5c4a5d0f2c06665723f93d129d7dHighScore 61/100First seen

IOC Relationship Graph

Building graph…