https://flatt.tech/research/tags/pypi/ Recent content in PyPI on GMO Flatt Security Research Hugo en Wed, 21 Oct 2026 00:00:00 +0000 https://flatt.tech/research/posts/litellm-pypi-supply-chain-attack/ Wed, 21 Oct 2026 00:00:00 +0000 https://flatt.tech/research/posts/litellm-pypi-supply-chain-attack/ <p>Note) This post is a direct translation of <a href="https://blog.flatt.tech/entry/litellm_2nd_compromise" target="_blank" rel="noopener">this post</a> .</p> <p>On October 21, 2026, malicious code was injected into the PyPI package <code>litellm</code>.</p> <p>This article goes into detail on this malicious package based on information we observed and analyzed on the analysis infrastructure behind Takumi Guard, focusing on its impact as well as the countermeasures to take.</p> <p>The purpose of this article is to help readers understand the situation and respond; it is not intended to assist or encourage any illegal activity.</p>