October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
If you reinstalled LiteLLM on the night of October 21st without pinning the version, please check your environment first. The ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...
Software is only part of the problem ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
Traditional compute primitives are not built to run hundreds of millions of these agents at planet scale, which led us to ...
Attackers briefly altered configuration files on AOMEI’s servers between April and July 2026 so that AOMEI Backupper, a ...
ME News reports that on October 22 (UTC+8), according to SlowMist monitoring, LiteLLM has again been targeted by a supply ...
SlowMist has detected that LiteLLM has again been targeted by a supply chain attack. The malicious version, litellm@1.107.0, ...
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
According to Slow Fog's disclosure, LiteLLM has once again encountered a supply chain attack, with the malicious version ...