LiteLLM Python package compromised by supply-chain attack

Re:LiteLLM Python package compromised by supply-chain attack by iwhalen on Tuesday March 24, 2026 @09:05AM (#47501993)

What is happening in this issue thread? Why are there 100+ satisfied slop comments?

[ Parent | on HN ]

Re:LiteLLM Python package compromised by supply-chain attack by bakugo on Tuesday March 24, 2026 @09:14AM (#47502112)

Attackers trying to stifle discussion, they did the same for trivy: https://github.com/aquasecurity/trivy/discussions/10420

[ Parent | on HN ]

Re:LiteLLM Python package compromised by supply-chain attack by Imustaskforhelp on Tuesday March 24, 2026 @09:28AM (#47502293)

I have created an comment to hopefully steer the discussion towards hackernews if the threat actor is stifling genuine comments in github by spamming that thread with 100's of accounts

https://github.com/BerriAI/litellm/issues/24512#issuecomment...

[ Parent | on HN ]

Re:LiteLLM Python package compromised by supply-chain attack by nubg on Tuesday March 24, 2026 @09:09AM (#47502060)

Are they trying to slide stuff down? but it just bumps stuff up?

[ Parent | on HN ]

Re:LiteLLM Python package compromised by supply-chain attack by cirego on Tuesday March 24, 2026 @09:07AM (#47502022)

First thing I noticed too.

[ Parent | on HN ]

Re:LiteLLM Python package compromised by supply-chain attack by kevml on Tuesday March 24, 2026 @09:05AM (#47502006)

Potentially compromised?

[ Parent | on HN ]