Malicious code in litellm (PyPI)
What to do
- Check every lockfile and build cache for the affected versions below and remove them.
- Rotate any secrets (tokens, keys, cloud credentials) that were available to machines that installed them.
- Pin to a known-good version and reinstall from a clean lockfile.
Malicious versions
litellm
- = 1.82.7
Check your project: pip show litellm
litellm
- = 1.82.8
Check your project: pip show litellm
litellm
- = 1.107.0
Check your project: pip show litellm