LiteLLM malware found in official release via hyphen lookalike repo
correctMeIfImcorrect · reddit · 2026-10-25
A Reddit post links to a video alleging malware was planted in an official LiteLLM release. The screenshot reveals the trick: a fake repo name inserts a hidden hyphen to turn the real BerriAI/litellm into a near-identical lookalike. A classic supply-chain typosquatting attack that LiteLLM users should verify their sources against.
More from coding & agent
- Dev offers to pay extra for a 'terse mode' that caps agent replies at 5 lines — weswinder · 2026-10-25
- Agent builds 100%-reliable Node.js brotli exploit in 5 unsupervised hours — jcran · 2026-10-25
- Dev builds interactive 3D energy textbook covering full GCSE topic with Opus 5.5 and Three.js — Afinetheorem · 2026-10-25
- Codex CLI 0.164.0 Adds Presets: Save Prompts and Settings, Recall via Ctrl+X P — pvncher · 2026-10-25
- 305M-Parameter Sparse MoE Runs Computer-Use Agent Fully Offline on a MacBook Air — lmoroney · 2026-10-25
- Kling 4 nails one-shot real estate videos with full reference-image consistency — venturetwins · 2026-10-25