The compromise appears somewhere in the build and deploy system.
reply> No public commit in BerriAI/litellm contains data = "cook" or a cook/ folder.
> SafeDep assesses, with moderate to high confidence, that BerriAI’s private release pipeline built these wheels from an attacker-modified git source.
Every harness thinking right now… "if we want do something like this we won't even have to compromise anything."
replySarcasm?
replyhaha, yes, sorry.
replyyou needed more exclamation marks :)
replyThe gentleman's /s tag.
replyI mean, 55k commits in 3 years, that's about 55 a day, 7 days workweek. It's reasonably implied no one can be looking at all them thoroughly.
replyThis incident is unrelated to what was committed to the repository.
More info: https://docs.litellm.ai/blog/security-incident-oct-21-2026
reply