The Loop

supply chain security

LiteLLM turned a package install into an intrusion path

A supply chain compromise in LiteLLM versions 1.82.7 and 1.82.8 delivered malware through PyPI that executed at Python startup via .pth files.