bone@desk: ~/backbonebrief90×28 · utf-8 · no network calls
~ / topics / LiteLLM

LiteLLM

2 stories on this subject, newest first.

2 storiesSecurity
summarylive
entries2
latest24 Oct
all subjectsA–Z
~/topics/litellm — entries2

1 story

Security / LiteLLM

LiteLLM rotated its image-signing key, and the old pin will fail

LiteLLM's 24 October releases sign every Docker image and Helm chart with a new cosign key, remove the eMudhra root CA from its trust bundles, and mark both changes as present in 1.105.4, 1.104.6 and 1.103.8. If you pin the old public key in CI or an admission policy, verification fails until you replace it.

3 min read

1 story

Security / LiteLLM

LiteLLM 1.107.0 on PyPI was malware: a stealer in every wheel

All seven 1.107.0 wheels installed a credential stealer and a remote-code loader that run on every Python start in that environment, not just when LiteLLM runs. PyPI has removed the release and the affected Docker tags are yanked; anyone who installed it needs to rotate credentials, not just uninstall.

4 min read
more insections
Security→
No trackers · no analytics · no third-party callsbackBone Brief · one operator, sources on the page