LiteLLM PyPI Compromise: What You Need to Know Now

LiteLLM PyPI Compromise: What You Need to Know Now Meta Description: LiteLLM 1.82.7 and 1.82.8 on PyPI are compromised. Learn what happened, how to check if you're affected, and exactly what steps to take to protect your systems. TL;DR: Two versions of the popular LiteLLM Python package (1.82.7 and 1.82.8) were found to be compromised on PyPI. If you installed either version, your system may have been exposed to malicious code. Immediately audit your environment, roll back to a safe version, rotate any exposed credentials, and review your dependency management practices. This article walks you through everything you need to know. Key Takeaways LiteLLM versions 1.82.7 and 1.82.8 on PyPI contain malicious code — do not install or use them Immediate action required: Uninstall affected versions and downgrade or upgrade to a verified safe release Credential rotation is critical — assume any API keys, tokens, or secrets in affected environments are compromised Supply chain attacks are rising