LiteLLM

LiteLLM is an open-source Python library that provides a standardized interface for calling multiple large language models through a single API, supporting providers like OpenAI, Anthropic, Azure, and others. It simplifies LLM integration by abstracting away provider-specific differences and handling authentication, rate limiting, and error management. For enterprises, this matters because it reduces vendor lock-in, streamlines model switching for cost optimization and compliance testing, and provides centralized logging and monitoring for AI governance purposes.

1 item

ResearchGlobal2026-08-12

LiteLLM Supply Chain Attack Hit 2,500 Orgs Through Malicious PyPI Packages

Researchers at CloudSEK confirmed that two malicious versions of LiteLLM, a widely used AI proxy library, were published to PyPI and exfiltrated AI provider keys, cloud credentials, SSH keys, and runtime secrets from over 2,500 organizations. The attack cascaded from a prior compromise of Aqua Security's Trivy scanner and exposed approximately 434,000 CI/CD pipelines during a 40-minute window. CloudSEK concludes that AI infrastructure has become a high-value attack target, and that open-source AI dependency management is a critical unaddressed gap in most enterprise supply chain security programs.

supply chain security LiteLLM PyPI credential exposure AI infrastructure risk third-party dependencies CI/CD security CloudSEK