LiteLLM 1.107.0 was poisoned: rotate every secret it could reach
A hijacked LiteLLM release pipeline pushed a credential stealer to PyPI and Docker for about two hours on 21 October. Rebuild on 1.106.2 and rotate secrets.
PyPI
A hijacked LiteLLM release pipeline pushed a credential stealer to PyPI and Docker for about two hours on 21 October. Rebuild on 1.106.2 and rotate secrets.
