# litellm Published articles for litellm. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Chainguard Libraries now available on AWS Security Hub Extended DevFeed: [Chainguard Libraries now available on AWS Security Hub Extended]() Original publisher: [Read original article]() Published: 2026-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [AWS Security Hub](), [Security](), [software supply-chain attack](), [Malware](), [Open Source](), [Amazon Web Services]() Tags: [ai-coding](), [aws-security-hub](), [axios](), [chainguard-libraries](), [dependencies](), [java](), [javascript](), [litellm](), [malware](), [mini-shai-hulud](), [npm](), [open-source](), [python](), [redhat](), [redhat-cloud-services](), [security](), [shai-hulud](), [software-supply-chain](), [software-supply-chain-attack](), [telnyx]() ### AI overview Chainguard Libraries is now available through AWS Security Hub Extended's Supply Chain category. The article presents it as a malware-free catalog of Python, Java, and JavaScript dependencies intended to reduce reliance on public registries and help protect AWS workloads from software supply-chain attacks. ### Source excerpt Chainguard Libraries is now available in AWS Security Hub Extended, delivering malware-resistant open source dependencies for AWS workloads. ## The Pulse: a new trend, smart model routing DevFeed: [The Pulse: a new trend, smart model routing]() Original publisher: [Read original article]() Author: Gergely Orosz Published: 2026-07-02T18:46:24Z Content type: article Language: en Sources: [The Pragmatic Engineer]() Topics: [Model Routing](), [AI Models](), [LLMs]() Tags: [ai-gateway](), [ai-models](), [latency](), [litellm](), [model](), [model-routing](), [openrouter]() ### AI overview The article surveys emerging smart model-routing tools that select AI models for coding and other tasks based on factors such as prompt difficulty, cost, latency, and availability. It lists offerings including Factory Router, Not Diamond, Vercel AI Gateway, OpenRouter, Kilo Gateway, Requestly.ai, LiteLLM, and others, while noting that some vendors claim cost savings. ### Source excerpt Are there any 'intelligent' router solutions out there which select the right model for the right task? I looked into it, and there are a few options. ## AI gateways: why and how DevFeed: [AI gateways: why and how]() Original publisher: [Read original article]() Author: Nicolas Fränkel Published: 2026-05-31T00:00:00Z Content type: article Language: en Sources: [Nicolas Fränkel]() Topics: [Amazon API Gateway](), [LLMs](), [Artificial Intelligence](), [Routing (disambiguation)](), [Claude](), [Security](), [litellm](), [Caching](), [Scalability](), [Load Balancing](), [observability]() Tags: [ai](), [ai-gateway](), [anthropic](), [api-gateway](), [backend](), [caching](), [claude](), [claude-code](), [coding-assistant](), [decoupling](), [devstral](), [gateway](), [litellm](), [llm](), [llms](), [load-balancing](), [mistral](), [observability](), [open-source](), [routing](), [scalability](), [security](), [technical]() ### AI overview This article explains how AI gateways apply the API gateway pattern to AI clients and LLM backends. It discusses using a gateway to centralize model and provider management, governance, cost control, routing, caching, failover, load balancing, and observability, and considers routing Claude Code requests to another provider. ### Source excerpt Before working for 2 years on the Apache APISIX API gateway, I was mainly oblivious to API gateways. It's only by working with them that I understood their value. Decoupling the client and the server unlocks a lot of options: moving authentication to the API Gateway, securing APIs, deduplicating API requests, etc. In this post, I want to describe how the same pattern applies to AI. AI gateways AI gateways work in a similar way. ## Cyber resiliency in practice: Lessons from recent supply chain attacks DevFeed: [Cyber resiliency in practice: Lessons from recent supply chain attacks]() Original publisher: [Read original article]() Published: 2026-05-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [resiliency](), [supply chain attacks](), [supply-chain-security](), [axios](), [GitHub Actions](), [litellm](), [trivy](), [npm](), [PyPI](), [Python](), [Large Language Model]() Tags: [axios](), [chainguard-libraries](), [cyber-resiliency](), [cybersecurity](), [github-actions](), [litellm](), [malware](), [npm](), [pypi](), [python](), [security](), [security-attacks](), [social-engineering](), [software-supply-chain-security](), [supply-chain-attacks](), [trivy](), [worm]() ### AI overview The article defines cyber resiliency as an integrated ability to anticipate, withstand, recover from, and adapt to attacks across the full Protect, Detect, Respond, and Recover lifecycle. It examines recent supply chain attacks involving Trivy, Axios, and LiteLLM, highlighting risks such as GitHub Actions misconfiguration, long-lived tokens, incomplete credential rotation, mutable Git tags, maintainer-account compromise, and malicious package releases. ### Source excerpt Learn how modern cyber resiliency helps organizations prevent, detect, and recover from supply chain attacks like Trivy, Axios, and LiteLLM. ## Chainguard Libraries is now free until June 30, 2026 -- no commitment required DevFeed: [Chainguard Libraries is now free until June 30, 2026 -- no commitment required]() Original publisher: [Read original article]() Published: 2026-04-09T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [open-source-security](), [Security](), [Malware](), [Java](), [JavaScript](), [Python]() Tags: [2026](), [article](), [attacks](), [axios](), [chainguard-console](), [chainguard-libraries](), [chainguard-repository](), [code](), [dependency](), [free](), [install](), [java](), [javascript](), [libraries](), [library](), [litellm](), [malicious-packages](), [malware](), [open-source](), [open-source-packages](), [open-source-security](), [packages](), [rebuilds](), [software-supply-chain-security](), [telnyx](), [trivy-attack]() ### AI overview Chainguard Libraries is free for Chainguard console users until June 30, 2026, with no paid commitment required. It rebuilds Python, Java, and JavaScript packages from verified source in isolated environments and excludes libraries that use install-time scripts, helping reduce malware and software supply-chain risk. ### Source excerpt Open source attacks are rising. Chainguard Libraries rebuilds packages from verified source to block malware--now free until June 30, 2026. ## Ship and patch doesn't cut it in the AI era DevFeed: [Ship and patch doesn't cut it in the AI era]() Original publisher: [Read original article]() Published: 2026-04-08T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [AI-assisted coding](), [supply-chain-security](), [Security](), [prompt injection](), [GitHub Actions](), [litellm](), [trivy]() Tags: [ai](), [ai-code-security](), [ai-coding](), [ai-security](), [chainguard-containers-for-ai](), [chainguard-libraries-for-ai](), [github-actions](), [litellm](), [prompt-injection](), [security](), [software-supply-chain](), [software-supply-chain-security](), [trivy]() ### AI overview This opinion article argues that AI-generated code and dependencies are entering software environments faster than traditional security review processes can handle, while AI also accelerates vulnerability discovery and attacks. It concludes that reactive scanning and patching alone are insufficient and emphasizes trusted inputs for software supply-chain security. ### Source excerpt AI is accelerating code and attacks. Learn why patching alone can't keep up, and why securing the software supply chain starts with trusted inputs. ## Technology Short Take 193 DevFeed: [Technology Short Take 193]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-04-03T14:00:00Z Content type: article Language: en Sources: [Scott's Weblog]() Topics: [datacenter](), [networking](), [Security](), [GitHub Actions](), [GitOps](), [ingress-nginx](), [Docker](), [litellm](), [Large Language Model]() Tags: [aws](), [blog-post](), [cilium](), [cli](), [cloud](), [cni](), [containers](), [cri-o](), [devops](), [docker](), [github-actions](), [gitops](), [go](), [iac](), [ingress-nginx](), [k8s](), [kubernetes](), [linux](), [litellm](), [networking](), [oci](), [security](), [technology]() ### AI overview Technology Short Take 193 is a curated roundup of data center technology links covering networking, IPv4 address space, consumer-router regulation, servers and hardware, security incidents involving Trivy and software supply chains, Ingress-NGINX migration, GitOps, local LLMs, and infrastructure management. ### Source excerpt Welcome to Technology Short Take #193! I know it has only been a couple weeks since the last Tech Short Take, but I am guessing that readers won't really mind another one. Here is my latest collection of articles and posts about data center-related technologies. Enjoy! Networking Brian Linkletter shares his 2026 list of network simulators and emulators. (Hat tip to Ivan P. for the link.) Emmanuel Vitus brings to light a battle over IPv4 address space and the control of the regional internet registries. Doug Dawson discusses the recent FCC ban on consumer-grade routers and the potential impacts to industry and ISPs. Servers/Hardware RIP Mac Pro. I had a "classic Mac Pro" (2012 era) for a long time, and I loved that system. (I even ran Linux on it for a while.) It is a shame to see it go. I mentioned on social media (Mastodon/Bluesky) that I recently purchased all the hardware for a new PC build. It'll be part PC/part home server, as I look to expand the type and scope of services that I self-host. Don't be surprised if a few articles emerge out of this. Security Trivy's GitHub Actions were compromised by attackers, leading to the exposure of CI/CD secrets. This post on the Socket blog has more details, and Rose Security has a write-up that provides more details on how a typosquatted domain and a fake version tag were involved. At least one other software supply chain exploit has been tracked back to the Trivy compromise: the Python litellm module on PyPI steals credentials. The Docker side of the Trivy compromise is shared in detail in this Docker blog post. Cloud Computing/Cloud Management Looking for some help in migrating away from Ingress-NGINX? This announcement of Ingress2Gateway 1.0 might be just what you are seeking. The FluxCD team published a post discussing Morgan Stanley's "Stairway to GitOps" presentation, which describes the firm's five-year journey from push-based pipelines to a self-service GitOps platform. Although I am not an AI fanboy, I do recogni ## Security Week 2614: атака класса supply chain на библиотеку LiteLLM DevFeed: [Security Week 2614: атака класса supply chain на библиотеку LiteLLM]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-03-30T17:00:04Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [litellm](), [Security](), [PyPI](), [Python]() Tags: [discord](), [kubernetes](), [litellm](), [pypi](), [python](), [security](), [slack](), [ssh](), [supply-chain](), [tag-9fe8963de219](), [terraform](), [tls]() ### AI overview The article reports a supply-chain compromise affecting LiteLLM versions 1.82.7 and 1.82.8 uploaded to PyPI. The malicious code searched victims' systems for files, credentials, secrets, and cloud infrastructure data, could contact a command server, and included Kubernetes persistence capabilities. Researchers also found similar malware in two Checkmarx extensions; the malicious versions were removed, and affected users were advised to rotate credentials and secrets. ### Source excerpt Громкой новостью прошлой недели стал взлом библиотеки LiteLLM, используемой в качестве посредника для коммуникации с большим количеством языковых моделей (сообщение от разработчиков, новость на Хабре). Через другое вредоносное приложение на Python была взломана учетная запись мейнтейнера проекта, после чего сразу две версии LiteLLM (1.82.7 и 1.82.8) с вредоносными модулями были загружены в репозиторий PyPI. Отчет с анализом вредоносного кода опубликовали эксперты "Лаборатории Касперского". В версии 1.82.7 вредоносный код был встроен в файл proxy_server.py. В версии 1.82.8 дополнительно появился .pth-файл, благодаря которому вредоносный код выполнялся при каждом запуске интерпретатора, даже если зараженная библиотека не использовалась. После запуска зараженный скрипт начинал рекурсивный обход рабочих директорий в системе жертвы. В каждой директории скрипт просматривал содержимое файлов, которое выводил в буфер stdout и сохранял в файл для последующей отправки на командный сервер злоумышленников. Далее скрипт собирал информацию о системе и также сохранял в файл. После этого он переходил к поиску конфиденциальных данных, включая следующие типы: Читать далее ## The litellm PyPI compromise and how Chainguard Libraries blocked malicious releases DevFeed: [The litellm PyPI compromise and how Chainguard Libraries blocked malicious releases]() Original publisher: [Read original article]() Published: 2026-03-24T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [litellm](), [chainguard libraries](), [open-source-security]() Tags: [chainguard-libraries](), [chainguard-libraries-for-python](), [litellm](), [litellm-attack](), [litellm-package](), [litellm-supply-chain-attack](), [open-source-security](), [pypi](), [secure-packages](), [security](), [supply-chain-attacks]() ### AI overview The article describes a litellm compromise on PyPI in which malicious releases were used to steal secrets. It states that Chainguard Libraries prevented exposure by rebuilding only verified source and blocking the malicious releases. ### Source excerpt Hackers compromised litellm on PyPI to steal secrets. Chainguard Libraries prevented exposure by rebuilding only verified source, blocking malicious releases. ## TL;DR for Session Recording. AI Session Summaries for SSH, Kubernetes exec, and Postgres DevFeed: [TL;DR for Session Recording. AI Session Summaries for SSH, Kubernetes exec, and Postgres]() Original publisher: [Read original article]() Author: ben@goteleport.com (Ben Arent) Published: 2025-09-24T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [ssh](), [Kubernetes](), [Security](), [audit](), [JSON](), [litellm](), [Ollama](), [OpenAI](), [Self-hosted]() Tags: [ai](), [audit](), [inference](), [json](), [kubernetes](), [litellm](), [ollama](), [openai](), [release](), [security](), [self-hosted](), [ssh]() ### AI overview Teleport introduces AI Session Summaries for interactive SSH, Kubernetes exec, and Postgres sessions. The feature generates concise, readable summaries with operational outcomes, security-relevant activity, and risk or impact levels, and stores summaries as JSON alongside session recordings. ### Source excerpt Teleport's AI-powered session summaries transform hours of recordings into readable digests, making security reviews and audits significantly more efficient.