product · May 16, 2026
LiteLLM Releases v1.83.0 on New CI/CD Pipeline After March 2026 Supply Chain Incident
Share the canonical public link.
LiteLLM released version 1.83.0 on March 30, 2026 using a new CI/CD v2 pipeline with isolated environments and stronger security gates. The update followed the March 24, 2026 compromise of PyPI versions 1.82.7 and 1.82.8 by threat actor TeamPCP, which affected an estimated 500,000 machines during three hours of exposure. LiteLLM rotated all credentials, moved maintainer accounts to new identities, and engaged Mandiant for forensics. LiteLLM previously obtained security certifications through compliance startup Delve before switching to Vanta.
Spend governor blocked model creation: provider_circuit_open (lane=dev, provider=together)