LiteLLM PyPI Incident: Seven Malicious Wheels and a Two-Hour Window

Removing a malicious package from PyPI doesn’t remove copies already downloaded into caches or environments. This Short examines the reported LiteLLM supply-chain incident, the limits of the available evidence, and defensive controls including hash-pinned dependencies, pip --require-hashes, and dependency cooldowns. Full reconstruction and practical checks: https://hackyjs.com/posts/reconstructing-the-litellm-pypi-incident-seven-malicious-wheels-and-the-two-hour-quarantine-window

Read the post →