We want to ensure that our customers know that Kong is not affected by the PyPI LiteLLM incident publicized yesterday.
Kong does not rely on LiteLLM — whether PyPI-distributed or otherwise — for any components in our runtime stack.
As you may know, a supply chain vulnerability affecting LiteLLM version 1.82.8, a popular open-source AI proxy library, was publicized yesterday. The malicious package, distributed via PyPI, executed a credential-stealing script capable of exfiltrating environment variables, cloud credentials, SSH keys, and other secrets from any environment where it was installed.
Kong did not incorporate or use the LiteLLM library in its products.
If your organization uses LiteLLM independently — in development environments, CI/CD pipelines, or alongside other tooling — we'd encourage you to review the original GitHub disclosure and treat any environment that ran pip install litellm==1.82.8 as potentially compromised.
Also, per the coverage by Comet, it is worthwhile to note that several other popular projects and agent frameworks rely on LiteLLM, including CrewAI, Browser-use, Opik, Mem0, DSPy, Agno, Guardrails, and Camel-AI. According to Comet, “Anyone who ran pip install or pip install --upgrade on any of these packages during the approximately 4-hour exposure window (roughly 09:00–13:30 UTC on March 24) could have pulled the compromised litellm as a transitive dependency.” We recommend referencing this blog if you want more information.
If you have questions about Kong's security posture or would like to talk through your AI infrastructure architecture, reach out to your Kong account team or contact security@konghq.com.
—The Kong Security Team
For product teams, the long days of lengthy Product Requirements Documents (PRDs) and rigid documentation workflows are giving way to something faster and more dynamic. They’re now using AI to generate prototypes, validate concepts with virtual cust
The Gartner report profiles Kong’s Insomnia as “an API development platform that promotes collaboration during development and testing,” a recognition that reflects our commitment to give development teams of any size a purpose-built environment for
SiliconANGLE Media runs this annual awards program to recognize companies, technologies, and people moving the needle in B2B tech. Winners go through a review process by industry analysts and experts. Kong was recognized as the 2026 AI Innovator
The APIs that have been powering websites and apps created a massive market, but there are only up to 8 billion humans consuming them behind pixels. As LLMs are taking over the world — in the form of productized agents first — there will be 100X m
Kong is excited to announce Solace as the newest member of our Premium Technology Partner Program, a program designed to deliver high-quality, reliable integrations that provide real business value for customers. Together, Kong and Solace unify AP
