New comment by aakashpawar in "Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor"

aakashpawar — Wed, 21 Oct 2026 16:45:38 +0000

If that's right then attestations wouldn't have saved anyone here either. They prove which workflow published the wheel, not what source that workflow checked out. A private pipeline building from the same-looking repo still gives you a perfectly valid attestation.

What would catch it is someone rebuilding from the public tag and comparing the result, which almost nobody does for the python wheels. I have been treating attestations as the answer for my own project's releases, so this is a good reminder of where they stop.

Hacker News: aakashpawar

New comment by aakashpawar in "Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor"