title: LiteLLM 1.107.0 Stealer Exfiltration or Dead-Drop Access
id: 6e3f1a8b-9c27-4d50-a2e4-1b7d8f0c5e93
status: experimental
description: Proxy request to the privcollect exfiltration endpoint (http://www.litellm.dev/healthcheck), the GitHub dead drop read by sitecustomize.py, or a /codepy second-stage fetch. litellm.ai is the legitimate project domain and is not matched.
references:
    - https://docs.litellm.ai/blog/security-incident-oct-21-2026
author: Cybaverse
date: 2026-10-21
tags:
    - attack.exfiltration
    - attack.t1041
    - attack.command-and-control
    - attack.t1102.001
logsource:
    category: proxy
detection:
    selection_exfil:
        cs-host|endswith: 'litellm.dev'
    selection_deaddrop:
        c-uri|contains: '/letters9813/pythonclient-test/'
    selection_token:
        cs-headers|contains: 'XWiA8gZNa7NcX2XRoAEb'
    selection_stage2:
        c-uri|endswith: '/codepy'
    condition: 1 of selection_*
falsepositives:
    - Security researchers or sinkhole testing
level: critical