#LiteLLM
All CosmicBytez Labs articles tagged #LiteLLM, across news, security advisories, how-to guides, and projects.
- News
Australian Police Charge Two Men Over TeamPCP Supply Chain Attacks
AFP charges two Western Australian men over TeamPCP's March 2026 compromise of Trivy, Checkmarx KICS, and LiteLLM in a global supply chain campaign.
- News
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
Researchers at Obsidian Security disclosed a chain of three vulnerabilities in the widely deployed LiteLLM open-source AI gateway that allows a default...
- Security
CVE-2026-42208: LiteLLM AI Gateway Pre-Auth SQL Injection
A critical SQL injection vulnerability in LiteLLM's proxy server allows unauthenticated attackers to manipulate database queries during API key...
- News
Hackers Are Exploiting a Critical LiteLLM Pre-Auth SQLi Flaw
Threat actors are actively exploiting CVE-2026-42208, a critical pre-authentication SQL injection vulnerability in the LiteLLM open-source LLM gateway,...
- Newsletter
Apr 28 Digest: Medtronic 9M Breach, GitHub RCE, LiteLLM
ShinyHunters hits Medtronic and ADT in the same week, exposing millions of records; a critical one-push RCE lands in GitHub; LiteLLM's pre-auth SQL...
- News
How LiteLLM Turned Developer Machines Into Credential
The TeamPCP threat actor's March 2026 supply chain attack against LiteLLM exposed a dangerous blind spot: developer workstations running local AI agents...
- News
The Good, the Bad and the Ugly in Cybersecurity – Week 14
SentinelOne intercepts a LiteLLM supply chain attack in real time, attackers weaponize the Axios npm package to deploy a cross-platform RAT, and a Chrome...
- News
Mercor Confirms Security Incident Tied to LiteLLM Supply
AI hiring platform Mercor has confirmed a security incident linked to the LiteLLM PyPI supply chain attack carried out by TeamPCP. Separately, Lapsus$...
- Newsletter
Mar 26 Digest: LeakBase Admin Arrested, WebRTC Skimmer
This week: Russian authorities detain the alleged LeakBase admin weeks after the FBI-led global crackdown on the 147,000-subscriber stolen-data...
- News
Supply Chain Attack Hits Widely-Used AI Package, Risking
Malicious versions of LiteLLM — a Python package with 3 million daily downloads present in roughly 36% of cloud environments — were quietly pushed to PyPI...