LiteLLM on PyPI compromised: were you hit?
A malicious litellm 1.107.0 release was reported on PyPI. Check your requirements or poetry.lock in your browser.
Check now βTech & AI news that tells you what to do next.
Caldrel covers the AI and tech stories that matter, plus free tools that answer βam I affected?β in seconds.
Latest
News, tools and alerts
Was I hit? Free lockfile checker
Paste a Python or npm lockfile and see known vulnerabilities and malicious packages from OSV.dev.
Open tool βPatch-this-now alerts
Actively exploited flaws from CISAβs KEV list, explained in plain English. Coming soon.
Learn more βHow the checker works
Private by design
1Paste or drop a lockfile
requirements.txt, poetry.lock, package-lock.json or yarn.lock.
2Parsed in your browser
Your file is never uploaded to Caldrel. Only package names and versions go to OSV.dev.
3Get a clear answer
Known vulnerabilities and malicious packages, with the version to upgrade to.
One short email a week
The AI and tech news that matters, plus patch-now alerts. Signups open soon. Follow @CaldrelHQ to hear first.