Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
7 IOCs
New LiteLLM Supply Chain Attack Hits PyPI and Docker
Excerpt
A new LiteLLM supply chain attack has turned version 1.107.0, an official release of the popular open-source LLM gateway, into a credential stealer. On October 21, 2026, attackers used stolen maintainer tokens to publish trojanized wheels to PyPI and poisoned Docker images, exposing cloud keys, AI provider secrets and LiteLLM proxy databases on any host that ran them. With roughly 23 million weekly downloads, LiteLLM sits inside many AI stacks, so even a two-hour window…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Indicators of Compromise
Open the mindmap →7 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 7f191632e7320705d154b85204f1ae546b543acbd7e8861229b76f5042b92bdb | High | Score 68/100 | First seen |
| IP | 165.227.201.8 | High | Score 63/100 | First seen |
| SHA256 | 9dd0a3926f96a37eb86cf1ee2310d9be93139cc4ebef3ef9e2efe9531390be25 | High | Score 68/100 | First seen |
| SHA256 | 1bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339e | High | Score 64/100 | First seen |
| IP | 168.100.8.57 | High | Score 63/100 | First seen |
| URL | http://www.litellm.dev/healthcheck | High | Score 63/100 | First seen |
| SHA256 | 34bef04fe88ac9d0aae0475630b1738681d15b94f233ac8aa46eacf5968305fa | High | Score 68/100 | First seen |
IOC Relationship Graph
Building graph…