Unverified50% confidenceEventExact time
Wiz disclosed that a malicious version, LiteLLM 1.107.0, was uploaded to PyPI, with the related GHCR and Docker Hub image tags also implanted, and it was subsequently quarantined and removed; the most recent secure version is 1.106.2.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/25/2026
First Seen
Valid until: 11/8/2026
Sources
Related Entities
Related Claims
Partially VerifiedThe LiteLLM 1.107.0 version on PyPI was tampered with, planting a credential stealer and backdoor upon installation.78% similarUnverifiedThis FlashMLA release is a breaking change: it removes support for the Hopper architecture and V3, V3.2, V4.0, and changes the KV Cache format for FP8 and FP4, making it incompatible with previous versions.64% similarUnverifiedSGLang v0.5.18 upgrades its dependencies to PyTorch 2.13.0 (with triton 3.7.1), FlashInfer 0.6.17, CuTeDSL 4.6.2, and sgl-kernel 0.4.6.post1.57% similarVerifiedAccording to a benchmark report from leanzero.net, DeepSeek released V4.1 Flash 1017 on October 17 (Saturday).57% similarUnverifiedLangChain-Fireworks released version 1.7.1, which is a minor iteration focused primarily on fixes.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1094889API
curl https://kongchang.com/api/v1/knowledge/claims/1094889MCP
get_claim(id=1094889)