You Patched LiteLLM, But Do You Know Your AI Blast Radius?

Snyk reports a supply‑chain compromise of the Axios npm package: malicious versions 1.14.1 and 0.30.4 were published from a compromised maintainer account and introduced a hidden dependency that installs a cross‑platform remote access trojan (RAT). The incident impacts projects that pulled those malicious releases; recommended actions include identifying and removing the malicious versions from dependency trees, verifying package integrity/lockfiles, rotating credentials and tokens, and monitoring for signs of compromise.