LiteLLM 1.107.0 was malware
Someone hijacked LiteLLM's release pipeline and pushed a credential-stealing 1.107.0 to PyPI and Docker on Oct 21. Installed it or pulled `latest` that day? Treat that machine as compromised. Pin 1.106.2 and rotate every key it could reach.
Source: https://docs.litellm.ai/blog/security-incident-oct-21-2026
Allie Fern, CEO, Deploy Safely · hello@deploysafely.com