fix: add tldr to blog post

2026-07-20 16:19:55 +00:00 · 2026-03-24 16:54:59 -07:00
parent 7455b115bf
commit 4571f2a6c1
1 changed files with 9 additions and 0 deletions
@@ -16,6 +16,15 @@ import TabItem from '@theme/TabItem';
 > **Status:** Active investigation
 > **Last updated:** March 24, 2026, 2:00 PM ET

+## TLDR; 
+- The compromised PyPI packages were **litellm==1.82.7** and **litellm==1.82.8**. Those packages have now been removed from PyPI.
+- We believe that the compromise originated from the Trivy dependency used in our CI/CD security scanning workflow.
+- Customers running the official LiteLLM Proxy Docker image were not impacted. That deployment path pins dependencies in requirements.txt and does not rely on the compromised PyPI packages.
+- We are pausing new LiteLLM releases until we complete a broader supply-chain review and confirm the release path is safe.
+
+
+## Overview
+
 LiteLLM is investigating a suspected supply chain attack involving unauthorized PyPI package publishes. Current evidence suggests a maintainer's PyPI account may have been compromised and used to distribute malicious code.

 At this time, we believe this incident may be linked to the broader [Trivy security compromise](https://www.aquasec.com/blog/trivy-supply-chain-attack-what-you-need-to-know/), in which stolen credentials were reportedly used to gain unauthorized access to the LiteLLM publishing pipeline.