### [2026-10-21](/feed/2026/10/21/index.md)

##### Black October
#  Open-source artificial intelligence gateway LiteLLM is compromised by attackers, who push a malicious version of LiteLLM to the Python Package Index. 




### Sources:

1. [Security Week](https://www.securityweek.com/litellm-compromised-in-fresh-supply-chain-attack/)

### Related:

1. [ A critical security flaw, allowing for remote code execution, in 12 years of GitLab versions is disclosed, requiring updates. ](/feed/2026/10/21/a-critical-security-flaw-allowing-for-remote-code-execution-in-12-years-of-gitlab-versions-is-disclosed-requiring-up.md) _Context: Black October_
2. [Node.js releases three security updates to 10 different vulnerabilities, including 4 deemed high-severity, which affect how it handles DNS resolution, TLS handshakes, and Brotli decoding. ](/feed/2026/10/21/nodejs-releases-three-security-updates-to-10-different-vulnerabilities-including-4-deemed-high-severity-which-affect.md) _Context: Black October_
3. [ A critical vulnerability in PHP allowing for remote code execution is discovered, causing many websites to temporarily go offline while a security update is pushed the following day. ](/feed/2026/10/20/a-critical-vulnerability-in-php-allowing-for-remote-code-execution-is-discovered-causing-many-websites-to-temporarily.md) _Context: Black October_
4. [ Indian certificate authority eMudhra has its private keys compromised, revealing that some of them were extremely insecure single digit numerals. Major web browser developers Mozilla, Google, and Apple subsequently block the certificates. ](/feed/2026/10/20/indian-certificate-authority-emudhra-has-its-private-keys-compromised-revealing-that-some-of-them-were-extremely-insec.md) _Context: Black October_