Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential...
by abletonlive on Wednesday October 21, 2026 @09:55PM
(#50190195)
"Novel" is doing a lot of work here. Save the PR for people that will fall for it. There's nothing novel about being internally compromised which you've demonstrated two times in a row
I appreciate the feedback. We work hard to make every release safe and secure. The attack was novel, and I'd love your feedback on how we can improve our ci/cd further.
https://docs.litellm.ai/blog/security-incident-oct-21-2026#h...