#litellm

Last week, LiteLLM was compromised again. This encouraged me to post a little more about my project, because I believe that people are looking for an alternative right now.…

15s

Leaked LiteLLM Master Key Exploited to Compromise GitHub, Release Malicious PyPI and Container Packages

📰

0Read More

Leaked LiteLLM Master Key Exploited to Compromise GitHub, Release Malicious PyPI and Container Packages

DEV Community: github·Roman Dubrovin·4 days ago

#bAIShfMh

#devtogithub #technology #devto #dev #protections

Introduction: The Breach and Its Origins On October 21, LiteLLM’s ecosystem was shaken...

15s

Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release

📰

0Read More

Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release

DEV Community: infosec·Etairos.ai·5 days ago

#ZyUkbjOw

#devtoinfosec #devto #dev #litellm #october

TL;DR what: An unrevoked LiteLLM Agent Platform master key leaked on GitHub in May 2026...

15s

LiteLLM 1.107.0 Incident: A Hands-On Triage Checklist for Python and Docker Deployments

📰

0Read More

LiteLLM 1.107.0 Incident: A Hands-On Triage Checklist for Python and Docker Deployments

DEV Community: docker·Affix Center Softech Services Pvt. Ltd·5 days ago

#O9YJFaWz

#devtodocker #devto #dev #litellm #october

On 21 October 2026, a malicious LiteLLM 1.107.0 was published to PyPI and Docker registries for a few...

15s

LiteLLM Traces Its Poisoned 1.107.0 Release to a Master Key Nobody Revoked

🖼️

0Read More

LiteLLM Traces Its Poisoned 1.107.0 Release to a Master Key Nobody Revoked

WebProNews·John Overbee·5 days ago

#jQ9K2ch5

#webpronews #news #litellm #release #token

LiteLLM says a master key exposed in a public repository in May, and never revoked, let an attacker take a GitHub owner token and push a credential-stealing 1.107.0 release on Wednesday.…

15s

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

📰

0Read More

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

DEV Community: cybersecurity·CVE Reports·5 days ago

#ZWefoAJn

#devtocybersecurity #devto #dev #litellm #return

CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in...

15s

Hacker breached LiteLLM and uploaded malicious software update

📰

0Read More

Hacker breached LiteLLM and uploaded malicious software update

DEV Community: python·Hacks.gr·5 days ago

#UXwJWDhP

#devtopython #devto #dev #repository #litellm

An unrevoked master key exposed in a public repository allowed attackers to infiltrate the LiteLLM release pipeline, resulting in the malicious v1.107.0 re

15s

LiteLLM Got Backdoored on PyPI. Again. Here's What Your AI Stack Should Do Differently

🖼️

0Read More

LiteLLM Got Backdoored on PyPI. Again. Here's What Your AI Stack Should Do Differently

DEV Community: python·Ashraf·8 days ago

#19iPDeGV

#devtopython #devto #dev #litellm #keys

LiteLLM 1.107.0 shipped a credential stealer and a remote backdoor to PyPI on Oct 21. Same package, second time in 7 months. How it worked, how to check if you're hit, and what to change.

15s

LiteLLM supply chain attack hoovers up passwords and secrets

🖼️

0Read More

LiteLLM supply chain attack hoovers up passwords and secrets

www.theregister.com - Articles·Jessica Lyons·8 days ago

#V8qUECFn

#theregisterheadlines #theregister #litellm #security #malicious

View the full article

Create a free account to read full articles inline — no redirect to the original site.

Create account Log in

GitHub - kennethwolters/litelm: litellm without the bloat

🖼️

0Read More

GitHub - kennethwolters/litelm: litellm without the bloat

Hacker News·about 2 months ago

#bjfGEw9o

#github #litelm #litellm #llm #openai

litellm without the bloat. Contribute to kennethwolters/litelm development by creating an account on GitHub.

15s

Six weeks of Bifrost in a factory QA pilot: real cost numbers

🖼️

0Read More

Six weeks of Bifrost in a factory QA pilot: real cost numbers

DEV Community: computervision·Marco Rinaldi·5 months ago

#gwnvDKGf

#dev #bifrost #pilot #semantic #gateway

TL;DR: Six weeks running an AI gateway between our edge cameras and three cloud VLM providers cut our...

15s

LiteLLM server now supported on Vercel - Vercel

📰

0Read More

LiteLLM server now supported on Vercel - Vercel

Vercel News·Elvis Pranskevichus·5 months ago

#MQRhYnJq

#vercel #gateway #litellm #model #openai

Deploy LiteLLM server on Vercel to give developers OpenAI-compatible LLM access. Route models to any provider, including Vercel AI Gateway, with centralized control.

15s

The Hidden Supply Chain Risk in Your `pip install`

🖼️

0Read More

The Hidden Supply Chain Risk in Your `pip install`

DEV Community·Eastern Dev·6 months ago

#byRokajV

#python #ai #supplychain #dependency #packages

View the full article

Create a free account to read full articles inline — no redirect to the original site.

Create account Log in

CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM

🖼️

0Read More

CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM

DEV Community·CVE Reports·6 months ago

#8mVLKUDo

#litellmreleasev18310stable #exploit #security #cve #litellm

From Dev.to - security: CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM

15s

CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerability

🖼️

0Read More

CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerability

DEV Community·Freedom Coder·6 months ago

#X3mngiLe

#vulnerability #berriai #litellm #cybersecurity #date

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorised access to the proxy and the credentials it manages.

15s

How to Deploy Llama 3.2 with Ollama + LiteLLM Proxy on a $5/Month DigitalOcean Droplet: Multi-Model API Routing at 1/100th Claude Cost

🖼️

0Read More

How to Deploy Llama 3.2 with Ollama + LiteLLM Proxy on a $5/Month DigitalOcean Droplet: Multi-Model API Routing at 1/100th Claude Cost

DEV Community·RamosAI·6 months ago

#Nez6SNaz

#programming #tutorial #ai #ollama #litellm

From Dev.to - ai: How to Deploy Llama 3.2 with Ollama + LiteLLM Proxy on a $5/Month DigitalOcean Droplet: Multi-Model API Routing at 1/100th Claude Cost

15s

How I Built PipCanary: A Scanner for Malicious PyPI Packages

🖼️

0Read More

How I Built PipCanary: A Scanner for Malicious PyPI Packages

DEV Community·sebastian-kuebeck·6 months ago

#xalrBr7Y

#python #devops #security #incident #pipcanary

When the LiteLLM incident hit the news in March 2026, the vulnerability of the Python ecosystem...

15s

🖼️

0Read More

ADK Agents with Amazon Bedrock Models

DEV Community·xbill·6 months ago

#BfDKzz4s

#gemini #python #agent #amazonbedrock #bedrock

This article provides a step by step deployment guide for using Amazon Bedrock models with ADK...

15s

Menu

LiteLLM Supply Chain Attack: What Happened and What Python Teams Should Do

LiteLLM supply chain attack started with an exposed master key

GoModel - alternative to LiteLLM in Go (another AI gateway)

Leaked LiteLLM Master Key Exploited to Compromise GitHub, Release Malicious PyPI and Container Packages

Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release

LiteLLM 1.107.0 Incident: A Hands-On Triage Checklist for Python and Docker Deployments

LiteLLM Traces Its Poisoned 1.107.0 Release to a Master Key Nobody Revoked

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

Hacker breached LiteLLM and uploaded malicious software update

LiteLLM Got Backdoored on PyPI. Again. Here's What Your AI Stack Should Do Differently

LiteLLM supply chain attack hoovers up passwords and secrets

GitHub - kennethwolters/litelm: litellm without the bloat

Six weeks of Bifrost in a factory QA pilot: real cost numbers

LiteLLM server now supported on Vercel - Vercel

The Hidden Supply Chain Risk in Your `pip install`

CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM

CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerability

How to Deploy Llama 3.2 with Ollama + LiteLLM Proxy on a $5/Month DigitalOcean Droplet: Multi-Model API Routing at 1/100th Claude Cost

How I Built PipCanary: A Scanner for Malicious PyPI Packages

ADK Agents with Amazon Bedrock Models