GCVE-110-OSM-2026-14011

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published October 21, 2026

Lookalike (hyphenated) of the legitimate BerriAI/litellm repo. BerriAI's project-releaser run 39587059944 built the malicious litellm v1.107.0 PyPI wheels and Docker images from this repo at commit 20535d8f, which carries 10 attacker commits adding the cook.pth/cook.py/sitecustomize.py stealer. The repo now returns 404. Malicious commits (author Berri-AI <ckdi82fkoos@proton.me>): 9b98cd93 (cook/purelib/cook.pth), 51020100 (cook.py stealer), 7f7f9892 (sitecustomize.py loader), 91d6546f (inline stealer), 783c43bc (pyproject data = "cook"), 20535d8fa11f786a6c24df7488a0e449ed5f09ad (Dockerfiles COPY cook ./cook). Commits remain readable through BerriAI/litellm fork objects but are on no branch or tag.

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

9.6/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown		all (affected)	—

References

Malicious repository: https://github.com/Berri-AI/litellm

advisory

Browse GCVE Records

854 records in the GCVE database · Updated October 30, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON