AINewsnow

The LiteLLM Supply Chain Backdoor: What 3 Hours Means for Your AI Agent Gateway

This story is from 2026-09-22. It is preserved in the archive; the latest stories are on the live feed.

On March 24, 2026, two backdoored versions of litellm sat on PyPI. Version 1.82.7 went up at 10:39 UTC. Version 1.82.8 followed 13 minutes later. According to an NHS England cyber alert, PyPI quarantined the packages at 13:38 UTC that same day. That is roughly 3 hours where a pip install in the wro…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-22 03:22 · DEV Community — AI
    The LiteLLM Supply Chain Backdoor: What 3 Hours Means for Your AI Agent Gateway

More stories

  1. Higgsfield AI ships new video features in a day with GPT-6 Astra — OpenAI News
  2. Amazon blocks Meta’s Muse AI agent — The Verge AI
  3. Moonshot’s Kimi K3 lands on Amazon in key test for Chinese open-source AI revenue — South China Morning Post Tech
  4. Google's Gemini AI hacked three companies in security test — BBC Technology
  5. Lawsuit accuses Anthropic, OpenAI, SpaceXAI, Google of AI pacing 'collusion' — The Hill Technology
  6. Grok 4.7 — Hacker News Front Page
  7. NVIDIA CEO Jensen Huang rejects ‘AI will end the world’ claim, yet cautions ‘we should go as fast as we can but...’ — Mint AI
  8. British Columbia Sues OpenAI Over Canada Mass Shooting Warning Failure — Bloomberg AI

Get the daily brief of stories like this at 6:30 every morning →