โšก Live Advisories
๐Ÿšจ Active Incident: LiteLLM versions 1.82.7 and 1.82.8 on PyPI were confirmed compromised on March 24, 2026. Both packages contained malicious code. If you installed either version, rotate your API keys immediately and downgrade to 1.82.6 or upgrade to 1.82.9+.
โ†’ Official issue thread

Is Your AI Stack
Compromised?

Paste your requirements.txt below. We'll instantly check it against known-compromised AI packages โ€” no sign-up, no BS.

๐Ÿ”” Get Instant Alerts for Future AI Package Compromises

This tool checked your stack right now โ€” but what about next week? The LiteLLM incident won't be the last. Get email alerts the moment any of the 50+ top AI packages are flagged for a supply chain attack, typosquat, or malicious release.

๐Ÿ—‚ Current Advisories

litellm 1.82.7 / 1.82.8
Both versions confirmed to contain malicious code injected via supply chain attack on the PyPI publisher account. Downgrade to 1.82.6 or upgrade to 1.82.9+. Rotate all API keys if installed.
GitHub Advisory โ†’
langchain-community 0.3.x (Monitor)
No confirmed compromise but elevated risk following the LiteLLM incident. Verify your installation source. Watch for updates.