AI NewsCybersecurityDevOps
LiteLLM Supply Chain Attack: How Unpinned Dependencies Compromised 3.4M Daily Downloads
On March 24, 2026, LiteLLM (3.4M daily downloads) was backdoored via PyPI. Attackers harvested cloud credentials, SSH keys, and Kubernetes tokens via a poisoned build.