Search results for «PyPI Incidents»
-
LiteLLM Security Review: 1.107.0 Malicious Release and Supply-Chain Risks
LiteLLM 1.107.0 was compromised on PyPI and Docker for two hours in October 2026, delivering a credential stealer that targeted cloud keys and AI tokens.
-
LiteLLM Security Review: Supply Chain Compromise Through Malicious Package
A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.
