{"id":208,"date":"2026-10-29T07:21:37","date_gmt":"2026-10-29T07:21:37","guid":{"rendered":"https:\/\/bugskan.com\/?p=208"},"modified":"2026-10-29T07:21:37","modified_gmt":"2026-10-29T07:21:37","slug":"malicious-litellm-releases-turned-an-ai-gateway-dependency-into-a-credential-theft-risk","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/malicious-litellm-releases-turned-an-ai-gateway-dependency-into-a-credential-theft-risk\/","title":{"rendered":"Malicious LiteLLM releases turned an AI gateway dependency into a credential-theft risk"},"content":{"rendered":"<p>TrendAI\u2019s analysis describes malicious code in LiteLLM versions 1.82.7 and 1.82.8 distributed through PyPI in March 2026. The payload targeted credentials and included capabilities for persistence and movement through connected infrastructure.<\/p>\n<p>A compromised dependency can execute inside environments that already hold model-provider keys and cloud secrets. That does not make every model provider named in a stolen configuration the victim of an infrastructure breach.<\/p>\n<p>Compare package and build records with the incident\u2019s affected versions. If a malicious release executed, investigate the host and rotate credentials it could reach; merely upgrading the dependency does not undo stolen secrets or established persistence.<\/p>\n<p><a href=\"https:\/\/trendaisecurity.com\/en-us\/resources-insights\/trendai-security-blog\/inside-litellm-supply-chain-compromise\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>TrendAI\u2019s analysis identifies trojanized package versions 1.82.7 and 1.82.8 in the March 2026 supply-chain incident.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_c28553046ff63b","bugskan_event_type":"breach","bugskan_response":"REVIEW","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"The malicious 1.82.7 and 1.82.8 releases identified in the incident analysis.","bugskan_recommended_next_step":"Investigate execution of malicious releases and rotate credentials accessible to affected environments.","bugskan_who_should_check":"","bugskan_material_updated_at":"","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[2],"bugskan_technology":[21],"class_list":["post-208","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-security-brief","bugskan_technology-litellm"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/208","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=208"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/208\/revisions"}],"predecessor-version":[{"id":383,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/208\/revisions\/383"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=208"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=208"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}