Python Supply-Chain Compromise
Published: (April 8, 2026 at 06:25 AM EDT)
1 min read
Source: Schneier on Security
Source: Schneier on Security
Details
A malicious supply‑chain compromise has been identified in the Python Package Index package litellm version 1.82.8. The published wheel contains a malicious .pth file (litellm_init.pth, 34,628 bytes) which is automatically executed by the Python interpreter on every startup, without requiring any explicit import of the litellm module.
Mitigation
Securing critical libraries requires a range of practices, including:
- Generating Software Bill of Materials (SBOMs)
- Implementing SLSA (Supply‑Chain Levels for Software Artifacts)
- Using SigStore for signing and verification
These steps are essential to protect the Python ecosystem from similar threats.