My minute-by-minute response to the LiteLLM malware attack

Re:My minute-by-minute response to the LiteLLM malware attack by deathanatos on Thursday March 26, 2026 @04:53PM (#47535576)

I am confused; did you ever actually email anyone about the vuln? The AI suggests emailing security emails multiple times, but as I'm reading the timeline, none of the points seem to suggest this was ever done, only that a blog post was made, shared on Reddit, and then indirectly, the relevant parties took action.

I'm hoping this just isn't on the timeline.

[ Parent | on HN ]

Re:My minute-by-minute response to the LiteLLM malware attack by quietbritishjim on Thursday March 26, 2026 @05:20PM (#47535907)

The first line of the post is:

> I'm the engineer who got PyPI to quarantine litellm.

In guessing they used a tool other than Claude Code to serve the email.

[ Parent | on HN ]

Re:My minute-by-minute response to the LiteLLM malware attack by deathanatos on Thursday March 26, 2026 @05:30PM (#47536041)

"got" can be read as "indirectly, via a blog post, which I think they reacted to"

[ Parent | on HN ]

Re:My minute-by-minute response to the LiteLLM malware attack by Fibonar on Thursday March 26, 2026 @06:15PM (#47536513)

I've updated the timeline to clarify I did in fact email them. I’m not yet at the point of having Claude write my emails for me, in fact it was my first one sent since joining the company 10 months ago!

[ Parent | on HN ]

Re:My minute-by-minute response to the LiteLLM malware attack by dingdongditchme on Friday March 27, 2026 @04:04AM (#47540085)

Wait, what? You sent a single email being in a company for ten months?? Or was it the first external email?

[ Parent | on HN ]