Record · corpus.blog/posts/01a07df5-49ee-7218-91aa-008e3b4fcb9d

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

Snyk · published 24 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

8blogs citing

First cited: 18 Mar 2026
Most recent: 21 May 2026
Rank this month: not ranked
Links from this post: 21
Words captured: 2,480

Cited by

Blog

In the post

Date

vulncheck.com

Quantifying 2026 Routinely Targeted Vulnerabilities (So Far) Read at the source ↗

21 May 2026

Traefik Blog

Cross-Cutting Concerns Are Back, and the AI Stack Is Abusing the Gateway Pattern Read at the source ↗

7 May 2026

dbtechreviews.com

It’s Not One Group. The Whole Open Source Ecosystem Is Under Attack. Read at the source ↗

28 Apr 2026

anaconda.com

The Python Packages You Didn’t Install Are Now Your Biggest Security Risk Read at the source ↗

16 Apr 2026

susala.eu

Your AI Doesn’t Need My Memories Read at the source ↗

6 Apr 2026

Selected Posts | ashishb.net

Amazing Sandbox - run third-party tools & AI agents safely Read at the source ↗

4 Apr 2026

8a03e7a6.c-b-io.pages.dev

Cloudy With A Chance Of Compromise: How A Skid Ransoms Your Buckets Read at the source ↗

4 Apr 2026

dwaves.de

GNU Linux Debian 13 (vm) how to install airllm, openclaw.ai what is picoclaw.io ? the cyber security implications of AI (AI and the privacy problem: 1984 calling?) Read at the source ↗

18 Mar 2026

Links from this post

Link

Host

https://security.snyk.io/vuln/SNYK-PYTHON-LITELLM-15762713

security.snyk.io

https://trust.snyk.io/updates

trust.snyk.io

https://github.com/aquasecurity/trivy-action/security/advisories/GHSA-9p44-j4g5-cfx5

github.com

https://snyk.io/articles/trivy-github-actions-supply-chain-compromise/

snyk.io

https://www.endorlabs.com/learn/teampcp-isnt-done

endorlabs.com

https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/

futuresearch.ai

https://github.com/BerriAI/litellm/issues/24512

github.com

https://news.ycombinator.com/item?id=47501729

news.ycombinator.com

https://github.com/BerriAI/litellm/issues/24518

github.com

https://socket.dev/pypi/package/litellm/files/1.82.7/tar-gz/litellm-1.82.7/litellm/proxy/proxy_server.py

socket.dev

https://socket.dev/pypi/package/litellm/files/1.82.8/tar-gz/litellm-1.82.8/litellm_init.pth

socket.dev

https://learn.snyk.io/lesson/compromise-of-legitimate-package/

learn.snyk.io

https://github.com/python/cpython/issues/113659

github.com

https://attack.mitre.org/techniques/T1546/018/

attack.mitre.org

https://ramimac.me/trivy-teampcp/

ramimac.me

https://threats.wiz.io/all-actors/teampcp

threats.wiz.io

https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack

wiz.io

https://www.aikido.dev/blog/catching-a-canisterworm-uncovering-the-first-ever-icp-based-supply-chain-attack

aikido.dev

https://snyk.io/advisor/python-package/litellm

snyk.io

https://learn.snyk.io/lesson/supply-chain-vulnerabilities-llm/

learn.snyk.io

Ultralytics AI Pwn Request Supply Chain Attack Read at the source ↗

snyk.io