LiteLLM was compromised again, your Routstr node is not affected.
A malicious build of litellm 1.107.0 shipped last week with a credential stealer and remote-code loader in all seven wheels. It's the second litellm hijack this year.
Routstr is unaffected. We pin litellm >=1.101.2,<1.102 with an exact lockfile, so 1.107.0 can't resolve in a Routstr deployment, and we found none of the published indicators in our environments.
If you are running your own venv as a developer, check "pip show litellm". If it says 1.107.0, remove cook.pth, cook.py, and sitecustomize.py from site-packages before running pip again, startup re-triggers the payload, then treat every secret on that host as compromised and rebuild.
We're removing litellm. We only use it as a translation layer, and two hijacks in one year is not a good sign.
https://x.com/AikidoSecurity/status/2112892021170151795
routstr
npub130…ql29s
2026-10-21 16:09:53 UTC
Author Public Key
npub130mznv74rxs032peqym6g3wqavh472623mt3z5w73xq9r6qqdufs7ql29sPublished at
2026-10-21 16:09:53 UTCEvent JSON
{
"id": "8c02db7fe9500c9ee70d7b235b7a25f077b5a6e94ef3ec39eb0c0d2147528b47",
"pubkey": "8bf629b3d519a0f8a8390137a445c0eb2f5f2b4a8ed71151de898051e8006f13",
"created_at": 1792598993,
"kind": 1,
"tags": [],
"content": "LiteLLM was compromised again, your Routstr node is not affected. \n\nA malicious build of litellm 1.107.0 shipped last week with a credential stealer and remote-code loader in all seven wheels. It's the second litellm hijack this year. \n\nRoutstr is unaffected. We pin litellm \u003e=1.101.2,\u003c1.102 with an exact lockfile, so 1.107.0 can't resolve in a Routstr deployment, and we found none of the published indicators in our environments.\n\nIf you are running your own venv as a developer, check \"pip show litellm\". If it says 1.107.0, remove cook.pth, cook.py, and sitecustomize.py from site-packages before running pip again, startup re-triggers the payload, then treat every secret on that host as compromised and rebuild. \n\nWe're removing litellm. We only use it as a translation layer, and two hijacks in one year is not a good sign. \n\nhttps://x.com/AikidoSecurity/status/2112892021170151795",
"sig": "2cee17d77bb53f61f9ac558a7345bcdcf902e384c7b4f02471f5664384a4f75c68e2bb45b55215637aa60b986a68579403a27e7c40d73f1e2689c4bba5b82cba"
}