NetTraceArcade | Cybersecurity, AI & Cloud

Category: Cybersecurity News | Supply Chain Security | AI Security  |  Published: October 23, 2026  |  Reading time: about 14 minutes It happened again. On October 21, 2026, attackers pushed a malicious LiteLLM release, version 1.107.0 , to both PyPI and the project’s official Docker registries. LiteLLM is the gateway library that routes requests to OpenAI, Anthropic, Google and dozens of other model providers, with roughly 23 million weekly downloads. This is the second time in 2026 that its release path has been hijacked, and it is a different kind of attack from the first. In March, a poisoned security scanner leaked a publishing token. This time, according to LiteLLM’s own report, the attackers stole the GitHub credentials of three engineers and used the project’s legitimate release pipeline to ship malware. The malicious version reportedly carried both an infostealer and a remote access trojan. It was live for about two hours, which is more than eno...

Category: Cybersecurity News | Supply Chain Security | AI Security  |  Published: October 23, 2026  |  Reading time: about 15 minutes On March 24, 2026, a threat actor known as TeamPCP published two malicious versions of LiteLLM to PyPI. LiteLLM is the Python library and proxy that thousands of teams use to route requests to OpenAI, Anthropic, Google, Amazon and dozens of other model providers, and it was reportedly being downloaded about 3.4 million times a day. The attackers never found a bug in LiteLLM. Instead, they compromised Trivy, a popular vulnerability scanner that ran inside LiteLLM’s build pipeline, and used it to steal the credentials needed to publish packages as the real maintainer. A security tool became the way in. The incident was ranked among the biggest security stories of the year because of what it combined: a package that sits next to the most valuable keys in an AI stack, a trusted delivery channel, and an attack that could run wit...