Record · corpus.blog/posts/01a07df1-ef52-7079-bdf6-ecb7f41ac0eb

Incident Report: LiteLLM/Telnyx supply-chain attacks, with guidance

PyPI Blog · published 2 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.pypi.org Wayback capture

5blogs citing

First cited: 4 Apr 2026
Most recent: 3 Sept 2026
Rank this month: not ranked
Links from this post: 21
Words captured: 1,754

Cited by

Blog

In the post

Date

news.risky.biz

Srsly Risky Biz: China's Private Sector Botnets Are Worth Disrupting Read at the source ↗

3 Sept 2026

news.risky.biz

Risky Bulletin: Two TeamPCP members arrested in Australia Read at the source ↗

28 Aug 2026

OpenSSF Blog

Open Infrastructure Is Not Free, Part II: The Hidden Cost of Running Package Registries Read at the source ↗

6 May 2026

opensource.org

Welcoming the New Executive Director! Read at the source ↗

15 Apr 2026

blog.ulisesgascon.com

Newsletter #013: Large Phishing Operations Against Maintainers 🎯 Read at the source ↗

7 Apr 2026

Core Dispatch

Core Dispatch #1 Read at the source ↗

4 Apr 2026

Links from this post

Link

Host

Update: Ongoing Investigation and Continued Remediation Read at the source ↗

aquasec.com

https://pypi.org/project/litellm/

pypi.org

https://pypi.org/project/telnyx/

pypi.org

https://osv.dev/vulnerability/PYSEC-2026-2

osv.dev

https://docs.litellm.ai/blog/security-update-march-2026

docs.litellm.ai

https://osv.dev/vulnerability/PYSEC-2026-3

osv.dev

https://telnyx.com/resources/telnyx-python-sdk-supply-chain-security-notice-march-2026

telnyx.com

https://docs.pypi.org/trusted-publishers/

docs.pypi.org

https://pepy.tech/projects/litellm?timeRange=threeMonths&category=version&includeCIDownloads=true&granularity=weekly&viewType=line&versions=*

pepy.tech

https://docs.astral.sh/uv/concepts/resolution/

docs.astral.sh

https://docs.astral.sh/uv/concepts/configuration-files/

docs.astral.sh

https://pip.pypa.io/en/stable/development/release-process/

pip.pypa.io

https://pip.pypa.io/en/stable/topics/configuration/

pip.pypa.io

https://ichard26.github.io/blog/2026/01/whats-new-in-pip-26.0/

ichard26.github.io

https://pip.pypa.io/en/stable/cli/pip_lock

pip.pypa.io

https://github.com/zizmorcore/zizmor/

github.com

https://docs.pypi.org/attestations/

docs.pypi.org

https://www.python.org/sponsors/application/

python.org

https://www.python.org/psf/donations/

python.org

https://www.python.org/psf/developersinresidence/

python.org

https://alpha-omega.dev

alpha-omega.dev