https://www.comet.com/site/blog/litellm-supply-chain-attack/
https://docs.litellm.ai/blog/security-update-march-2026
Oops.

LiteLLM Supply Chain Attack: What Happened, Who's Affected, and What You Should Do Right Now
LiteLLM β 95 million downloads per month, a dependency of CrewAI, DSPy, Browser-Use, Opik, and nearly every major AI agent framework β was hit by a supply chain attack. Here is what happened, how we responded, and what you should do right now.