// GeminiHIGH
LiteLLM 1.107.0, a popular open-source LLM gateway used to access Gemini and other providers, was compromised through PyPI and Docker on 2026-10-24 with dual Python startup-hook credential stealers. The backdoored package can exfiltrate Gemini API keys and other provider credentials from affected deployments. Users running LiteLLM 1.107.0 should upgrade immediately and rotate API keys.
// Get alerts for Gemini