Security & Compliance
October 22, 2026LiteLLM 1.107.0 was malware: your Azure AI gateway audit
LiteLLM 1.107.0 shipped on 21 October 2026 with a credential stealer and remote-code loader that ran on every Python start, harvesting Azure, Kubernetes, SSH and AI-tool credentials plus the proxy database of provider keys. A two-hour audit for Azure teams running LiteLLM in front of Azure OpenAI: find the digests, hunt the indicators, rotate in the right order, and decide whether the gateway belongs in API Management.
LiteLLM
Supply Chain Security
Azure OpenAI
Azure API Management
AI Gateway
Azure Container Apps
AKS
NIS2
Cyber Resilience Act
Managed Identity
By Falak Mahmood