Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH040

How far did the poisoned LiteLLM 1.107.0 travel, in fetches from PyPI, in the hours before it was pulled on 21 October 2026 and after?

In short. We asked how often PyPI's public download logs recorded the poisoned LiteLLM 1.107.0 being fetched on 21 October 2026, the day it was up for about an hour and three quarters, and afterwards. So far, unreviewed: the logs as ClickPy holds them record 49,043 fetches that day, 1.4 per cent of all LiteLLM fetches, and for the hours it was the newest release that's within the range of 17 ordinary LiteLLM releases of the same weeks, though low in it unless the window ended early. The logs go on recording a trickle of fetches of it after it was pulled, 1,431 from 22 October to 8 November. A download is a fetch, not an install or an infection; a second read after 20 November and a reviewed record by 4 December come next.

Study, version 0.1 (interim; unreviewed), 10 November 2026 studies/LH040/LH040.md

From studies/LH040/ in the repository, last changed 10 November 2026.