Delve did the security compliance on LiteLLM, an AI project hit by malware

The report describes a supply‑chain malware incident in the widely used LiteLLM open‑source project: a malicious dependency stole login credentials and propagated to other packages/accounts after execution. Researcher Callum McMahon discovered and documented the infection, prompting a rapid investigation and remediation by LiteLLM with Mandiant involvement; the incident also raised questions about the project's third‑party security certification.