Global -- A malicious version of LiteLLM, version 1.107.0, was published to PyPI on October 21, 2026. It bundles a credential-stealing infostealer with a remote access trojan (RAT), according to OX Security. It is the second hijacking of the AI gateway this year, and PyPI has since quarantined the release.