DEV Community
•
2026-03-24 18:39
LiteLLM Was Compromised. That's Why I'm Building GoModel
LiteLLM just had a serious supply chain incident.
According to the public GitHub reports, malicious PyPI versions of LiteLLM were published, including 1.82.8, with code that could run automatically on Python startup and steal secrets like environment variables, SSH keys, and cloud credentials. The reported payload sent that data to an attacker-controlled domain. A follow-up issue says the PyPI pa...
