LiteLLM

Trail of Bits Hardens zizmor GitHub Actions Analyzer Following LiteLLM Supply Chain Incident

Trail of Bits released updates to zizmor on May 22, 2026, adding full YAML anchor support and fixing four parsing bugs after testing against 41,253 real GitHub Actions workflows from 6,612 repositories. The work directly references the March 2026 Trivy GitHub Action compromise that enabled TeamPCP to backdoor LiteLLM on PyPI via stolen credentials. Updates included 15 merged pull requests, integration tests for anchors, and alignment of the expression evaluator with GitHub’s Known Answer Tests. Zizmor now catches more workflow misconfigurations to prevent similar supply-chain attacks across open-source projects including LiteLLM.

BerriAI Launches LiteLLM Agent Platform for Isolated AI Agent Sandboxes

Krrish Dholakia, CEO of BerriAI, announced the LiteLLM Managed Agents Platform open for public preview on May 8, 2026. The self-hosted platform runs coding agents such as Claude Code and Codex inside Kubernetes-isolated sandboxes with a vault proxy for credential management and persistent session handling across pod restarts. Key features include per-team sandboxes, session continuity, and integration with an existing LiteLLM gateway for model routing. BerriAI open-sourced the full platform under MIT license at github.com/BerriAI/litellm-agent-platform with production deployment paths on AWS EKS and Render. The GitHub repository reached 475 stars as of the latest crawl.

LiteLLM Changes Professional Support Model Effective May 18, 2026

LiteLLM Releases Experimental Microservices Helm Chart for Scalable Deployment

VNX Adds LiteLLM Bridge for Multi-Provider AI CLI Governance on May 17 2026

TeamPCP Supply Chain Campaign Remains Active Through May 17 2026

CVE-2026-42208 Pre-Authentication SQL Injection Hits LiteLLM Proxy

SiliconANGLE Reports Forcepoint Details on TeamPCP LiteLLM Credential Theft

LiteLLM Posts Technical Account Manager Role in San Francisco

LiteLLM Releases v1.85.0 and v1.86.0-rc.1 with New Features

LiteLLM Adds Google AI Studio Managed Agents Support

LiteLLM Agent Platform Now Open Source with Kubernetes Sandbox Deployment

LiteLLM Agent Platform Launches with Codex and Hermes Agent Support

LiteLLM Continues Active Hiring for Reliability and Backend Roles

TeamPCP Supply Chain Campaign Compromised LiteLLM PyPI Versions 1.82.7 and 1.82.8

LiteLLM Exploited at Pwn2Own Berlin 2026 via SSRF and Code Injection Chain

LiteLLM Ditches Delve Compliance Startup and Switches to Vanta for Re-Certification

LiteLLM Enterprise Pricing Starts at $250 per Month for Basic Tier

LiteLLM Fixes CVE-2026-42208 SQL Injection Vulnerability in Proxy API Key Verification

LiteLLM Releases v1.83.0 on New CI/CD Pipeline After March 2026 Supply Chain Incident

LiteLLM Seeks Sales Development Representative for High-Velocity Sales Team

LiteLLM CTO Ishaan Jaffer Announces Open Sourcing of LiteLLM Agent Platform

LiteLLM Supply Chain Compromise Enables Lateral Movement Across Kubernetes Clusters