LiteLLM 1.107.0 was compromised: how to check your machines and what to rotate
On Oct 21, 2026, a malicious LiteLLM 1.107.0 shipped to PyPI, Docker Hub and GHCR for a few hours. Here's how to check whether you pulled it, how to clean up, and which secrets to rotate.