{"event":{"id":"evt-pc26q1-15f50e12407f","dedupe_key":"historical_public_event:2026-03-24:litellm-reports-malicious-pypi-package-versions-distributed-on-march-24","event_type":"historical_public_event","title":"LiteLLM reports malicious PyPI package versions distributed on March 24","summary":"LiteLLM documented a supply-chain compromise involving PyPI releases 1.82.7 and 1.82.8 published on 24 March 2026. The precise affected installations, downstream exfiltration and alleged Mercor causal chain require separate proof.","occurred_at":"2026-03-24T10:39:00.000Z","published_at":"2026-03-24T10:39:00.000Z","observed_at":"2026-10-14T14:30:00.000Z","reconstructed_at":"2026-10-14T14:30:00.000Z","ingest_type":"historical_backfill","locations":null,"status":"verified","confidence":0.97,"metadata":{"rts_finding_id":"rts_finding_d407fce27c034b7793f415f50e12407f","rts_handoff_id":"rts_handoff_0365a4b79fbc4536aacdaa4c2a78e869","scope":"historical_evidence_only","temporal_caveats":"dated compromised package release, later security notices distinguish incident from disclosure","owner_authorized":"preparation_and_validation_only","semantic_reconciliation":"pending","new_relation_onset":0,"canonical_compare_ids":[],"existing_relation_ids":["rel-open-source-software-2022q1","rel-software-agents-tool-interface-2023q2"],"source_claims_not_independent_deployment":1},"created_at":"2026-10-14T15:28:47.871Z","updated_at":"2026-10-14T15:28:47.871Z"},"artifacts":[{"id":"art-pc26q1-15f50e12407f-1","dedupe_key":"aacfe0a61305f619941d2f46c594a94350e2e0937ee71464c01768febe607f39","canonical_url":"https://docs.litellm.ai/blog/security-update-march-2026","evidence_locator":"","artifact_type":"dated_publication_or_supporting_document","title":"LiteLLM Security Update March 2026","summary":"Historical reference supporting LiteLLM reports malicious PyPI package versions distributed on March 24","creator_entities":["LiteLLM"],"released_at":"2026-03-24T00:00:00.000Z","content_hash":null,"metadata":{"rts_finding_id":"rts_finding_d407fce27c034b7793f415f50e12407f","retrospective_source_postdates_event":0},"created_at":"2026-10-14T15:28:47.858Z","updated_at":"2026-10-14T15:28:47.858Z","relation":"evidenced_by"},{"id":"art-pc26q1-15f50e12407f-2","dedupe_key":"745922bfbb0990303aef28060294b0931736af4b6f2837e087e960ef1bf57c97","canonical_url":"https://docs.litellm.ai/blog/security-townhall-updates","evidence_locator":"","artifact_type":"dated_publication_or_supporting_document","title":"LiteLLM Security Townhall Updates","summary":"Historical reference supporting LiteLLM reports malicious PyPI package versions distributed on March 24","creator_entities":["LiteLLM"],"released_at":"2026-03-27T00:00:00.000Z","content_hash":null,"metadata":{"rts_finding_id":"rts_finding_d407fce27c034b7793f415f50e12407f","retrospective_source_postdates_event":1},"created_at":"2026-10-14T15:28:47.858Z","updated_at":"2026-10-14T15:28:47.858Z","relation":"evidenced_by"}],"signals":[]}