Software supply chain security firm
Appears in 1 story · Last updated Oct 30, 2026
Analyzed the malicious package
LiteLLM published a malicious version 1.107.0 on October 21 and pulled it about two hours later. It carried a credential stealer that ran whenever Python started, even in programs that never imported the library, plus a backdoor that checked a GitHub repository for instructions.
Updated Oct 30
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
