Partially Verified65% confidenceEventExact time
The LiteLLM 1.107.0 version on PyPI was tampered with, planting a credential stealer and backdoor upon installation.
3
Sources
65%
Confidence
Short-term (~14 days)
Relevance
10/21/2026
First Seen
Valid until: 11/4/2026
Sources
LiteLLM 1.107.0 Caught in Supply Chain Attack: Credential Stealer and Backdoor Planted in PyPI Package
hackernewshackernews10/21/2026
Related Entities
Related Claims
UnverifiedThis FlashMLA release is a breaking change: it removes support for the Hopper architecture and V3, V3.2, V4.0, and changes the KV Cache format for FP8 and FP4, making it incompatible with previous versions.63% similarUnverifiedTorch Spyre is a PyTorch backend built by IBM for its Spyre accelerator.54% similarUnverifiedPyTorch从1.12版本开始正式支持MPS（Metal Performance Shaders）后端53% similarVerifiedThe torch.compile technology stack introduced in PyTorch 2.0 consists of three layers: TorchDynamo, AOTAutograd, and Inductor.52% similarUnverifiedLiteRT is the unified on-device AI runtime Google launched in 2024, replacing components such as TensorFlow Lite and the TensorFlow Lite GPU Delegate, with the goal of providing mobile and embedded devices with a cross-framework (including PyTorch, JAX, TensorFlow) inference execution engine.52% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081542API
curl https://kongchang.com/api/v1/knowledge/claims/1081542MCP
get_claim(id=1081542)