The LiteLLM Supply Chain Backdoor: What 3 Hours Means for Your AI Agent Gateway
This story is from 2026-09-22. It is preserved in the archive; the latest stories are on the live feed.
On March 24, 2026, two backdoored versions of litellm sat on PyPI. Version 1.82.7 went up at 10:39 UTC. Version 1.82.8 followed 13 minutes later. According to an NHS England cyber alert, PyPI quarantined the packages at 13:38 UTC that same day. That is roughly 3 hours where a pip install in the wro…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-22 03:22 · DEV Community — AI
The LiteLLM Supply Chain Backdoor: What 3 Hours Means for Your AI Agent Gateway