PressentifyThe Pressentify Blog

Backend engineering, explained for people who ship.

Tag

#supply-chain

1 article

A thick-outlined padlock-shaped gateway box with a cracked hasp, a stream of API key tags spilling out of it onto a hard-shadowed red block labelled 1.107.0, in flat yellow, red and blue.
Security

LiteLLM 1.107.0 was a credential stealer: how it got into the release workflow

A malicious LiteLLM 1.107.0 sat on PyPI for about 1h41m on 21 October 2026 and stole secrets at install time. The timeline, the release-workflow hole, and an audit you can run today.

· 8 min

Get the next one in your inbox

One practical backend article at a time. No spam; unsubscribe in one click.

Occasional. One-click unsubscribe.