Topic tag

litellm

3 articles tagged litellm. Browse the full archive or jump to all posts.

August 30, 2026 · 9 min read

Shai-Hulud arrests: what ANZ dev teams change this week

Two West Australians were arrested over Shai-Hulud, the npm worm behind the LiteLLM leak. The tradecraft outlives them. Here is this week's npm hygiene check.

August 27, 2026 · 10 min read

The Steam avatar that unmasked TeamPCP: what the AFP arrests teach you about identity hygiene

The AFP arrested two alleged TeamPCP members in Western Australia. The forensic thread that got there was a single cat avatar reused across five platforms for a decade. Here is the chain, and the five controls Flare says you should steal.

August 13, 2026 · 17 min read

LiteLLM supply-chain leak: how I checked my own home gateway before the news cycle caught up

A 40-minute poisoned-publish window on PyPI in March turned LiteLLM into the largest AI supply-chain leak of 2026. 195 TB of credentials, 2,500+ orgs, 434,000 CI/CD pipelines. I run LiteLLM at home. Here is the audit I ran this morning, what the Postgres logs actually showed, and the call I made on whether to rotate six provider keys.