October 21, 2026
LiteLLM 1.107.0 shipped a credential stealer: what to check and what to rotate
A malicious litellm 1.107.0 was published to PyPI and Docker registries on 2026-10-21. A practical checklist: how to tell if you are affected, how to clean up, and which secrets to rotate.