Delve did the security compliance on LiteLLM, an AI project hit by malware

Malware was discovered in LiteLLM, a popular open-source AI proxy project with up to 3.4 million daily downloads, after it infiltrated through a dependency and stole credentials. The malware was found by researcher Callum McMahon when a bug in the malicious code crashed his machine, and was likely 'vibe coded.' Adding to the controversy, LiteLLM's security compliance certifications (SOC2 and ISO 27001) were conducted by Delve, a Y Combinator startup accused of generating fake compliance data.