{
  "type": "bundle",
  "id": "bundle--02e6e9d3-f39b-52b7-8d70-c15ecbf66075",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--410ebec2-ef20-570c-8592-ac3c127bbf88",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "org:0d6867b3-2364-4b55-89d9-2f7dcdb3ede4",
      "name": "LiteLLM",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--39cd9931-b029-5320-88f3-6206089d65d2",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "inc:d3793f79-7b09-40e8-a09a-89d40c20413a",
      "name": "LiteLLM October release-pipeline compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--49c3e20d-c260-51cb-89c7-88989989adb0",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "brh:745d18ea-3aa5-42d3-bb51-4a848bbb3f38",
      "name": "LiteLLM October release-pipeline compromise"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a45aad18-8d7f-5508-812d-369948e96b1f",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:5d652d8c-6491-4b6d-bf03-dce8c1dc1ca7",
      "relationship_type": "resulted-in",
      "source_ref": "incident--39cd9931-b029-5320-88f3-6206089d65d2",
      "target_ref": "x-ally-event--9b0784b3-43f2-534d-88c9-08952c004b68",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:7a724fe2-bb74-4479-923a-682c715a3574",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b4ac3778-c5d3-5dc5-8884-c3b45ac951bf",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:91da57b0-4383-4589-8441-50d8975ed69f",
      "relationship_type": "affected-organization",
      "source_ref": "incident--39cd9931-b029-5320-88f3-6206089d65d2",
      "target_ref": "identity--410ebec2-ef20-570c-8592-ac3c127bbf88",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:dea98552-5570-4228-8eb9-c63de2af3369",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3c05e868-f354-5b6d-86b6-d9ef15c41415",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:699310ec-aa52-4672-94cc-1262d809136b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:15d3331c-baed-4894-aa14-8575d9000cc8",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "LiteLLM removed the affected artifacts and said its private enterprise registry was unaffected."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3f025e02-5f73-5f43-8868-ff184281929b",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:52db4d4d-fce3-43dc-a1df-53c61a9c8baf",
      "confidence": 100,
      "external_references": [],
      "x_ally_claim_object": {
        "kind": "iri",
        "value": "https://attack.mitre.org/techniques/T1195/002/"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--641b64da-fb49-58f4-8f25-be35846908af",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:00a3ccb0-6143-49ba-9cd5-26e3c24dc7f9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:b2db25b4-a540-42b9-ad87-6e2678462c93",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "All seven PyPI wheels were malicious and available from 11:39:51 to 13:23 UTC on October 21; affected container tags included v1.107.0, latest, main-latest and main-stable."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6dc2d657-9bfd-55f4-8270-8c4420c59b2b",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:7b0056dc-8eba-4b61-a970-8ea6fcbc034b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:d72238f7-4faa-4008-8550-9315366fc8cd",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "LiteLLM believed tokens were obtained from logs in its internal deployment; the initial entry into that deployment and the suspected vulnerability remained unconfirmed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--70252e9e-b2fe-5b1a-8eaa-d66dd1b0e3f8",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:f3f5a258-0529-4d9d-9c0a-537716018722",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:5d08ce1f-407d-4e8c-9e77-edd6ec6543e1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "LiteLLM said attackers modified its release workflow and published credential-stealing malware in version 1.107.0 through PyPI and container registries."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--88b7fa15-dde8-5ae4-8153-5fd6e4cd2c53",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:8219f316-3d80-41a3-8610-b175f9e72b03",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:ca0867d7-d4c4-48d7-847b-5237a3c22904",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-21"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--8de521c2-2aec-5df4-8fe6-f56ec3b9d6f8",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:b5a4257b-bf07-4ce6-9fbd-9bf58f120f5e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:784fb04f-2d04-4517-b76a-360e1b280989",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The official source tag lacked the malicious files; the compromised workflow built artifacts from an attacker-controlled repository."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--989b6294-be56-5a95-8589-fed17afd40e2",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:ec780669-a11b-473c-8989-5270f500dce9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:8340867d-b958-428b-b8c9-a9e27df304d3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-21"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--dbbe92bb-c726-53c1-8043-310544ec90ad",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:0277646a-848a-463a-98a3-808c5ce702fe",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:658cb855-0d10-4083-a76b-7840da5c422f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-10-21"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ebb7f7dc-b6a4-579b-85cb-a1aa78b39246",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:531e0a4a-3fc5-4d15-9f18-3309d9622318",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:16aad556-753e-4957-be3c-c3aca8a8f81a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "LiteLLM advised treating affected environments as compromised, rebuilding clean environments and rotating reachable secrets; it warned that starting Python or pip could rerun malicious startup files."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--fb557cc1-b4cf-5a49-8f48-8a5e8fe8297f",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "clm:90f59bd8-ce15-4e78-8c41-3a0a3e9f7760",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "LiteLLM",
          "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
          "external_id": "cit:4a7285c6-c79a-46dc-af60-cda67dfa2c46",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:4c0431e0c80660c446c853574ed3fbc9fe743e5f6fb6bc262120c6676d5d35e4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "LiteLLM said stolen developer GitHub credentials were used to disable branch protection and publish the altered artifacts."
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--9b0784b3-43f2-534d-88c9-08952c004b68",
      "created": "2026-10-23T14:20:19.933848+00:00",
      "modified": "2026-10-23T14:20:19.933848+00:00",
      "x_ally_original_id": "evt:abc84c0e-482b-4d61-9cf6-48b20bfe8b8f",
      "name": "Poisoned artifacts published and removed"
    }
  ]
}