LiteLLM

Two malicious LiteLLM releases were found on PyPI for about 40 minutes, containing code designed to steal credentials such as cloud keys, SSH keys, and database passwords from installed systems. A threat intelligence firm, CloudSEK, obtained a dataset built from approximately 434,000 captured files, which maps potential exposure to over 2,100 organizations.

Companies are facing unexpected financial costs from running autonomous AI coding agents due to high token usage, resulting in sticker shock. Consequently, there has been a surge of demand for AI model routers—software that optimizes requests by selecting the best model for cost and performance. This technology allows organizations to potentially reduce inference costs by double-digit percentages.

A critical SQL injection vulnerability (CVE-2026-42208) in BerriAI's LiteLLM Python package was exploited in the wild within 36 hours of disclosure. The flaw, with a CVSS score of 9.3, allows attackers to modify underlying data through SQL injection attacks.

Hackers are exploiting a critical pre-authentication SQL injection vulnerability (CVE-2026-42208) in the LiteLLM open-source LLM gateway to access sensitive information. The flaw allows attackers to bypass authentication and manipulate database queries, risking data exposure.

The ransomware Vect, associated with recent Trivy and LiteLLM supply-chain attacks, is actually a wiper that destroys files larger than 128KB. Check Point Research warns that paying the ransom is ineffective, as data recovery is impossible for victims.

Another npm supply chain attack is spreading through compromised packages, stealing secrets and sensitive data from developers' environments. The attack shares similarities with previous infections linked to the TeamPCP group and references a 'TeamPCP/LiteLLM method' in its payload.

GoModel is an open-source AI gateway developed by solo founder Jakub in Warsaw, designed to be 44x lighter than LiteLLM. It addresses AI cost tracking, model switching, debugging, and caching, with a focus on security and configurability via environment variables.