LiteLLM 1.107.0 ships malware that runs on any Python start; pin 1.106.2 and rotate keys
AIFlow_ML · x · 2026-10-23
Security alert: LiteLLM 1.107.0 was published with malware hidden in cook.pth / sitecustomize.py that executes on ANY Python start, even if you never import litellm. Recommended response: check every venv and container for 1.107.0, pin to 1.106.2, rebuild, and rotate every key the host could reach.
More from Safety
- Abliterated GLM-5.3 open-weight model released with 2x cyber exploitation capability — AaronBergman18 · 2026-10-23
- OMG Cable looks like a normal charger but can remotely take over your PC — manishkhosiya · 2026-10-23
- Solo.io Open-Sources AgentShield: Assume Every Attacker Is an Agent — pjausovec · 2026-10-23
- Agent team reverse-engineers Sonos firmware, appears to recover per-model RSA keys — doodlestein · 2026-10-23
- Anthropic co-founder Jack Clark: Chinese models are 'too dumb', 6-12 months behind on safety — pstAsiatech · 2026-10-23
- AI-drafted legal filings are overwhelming courts; Clio invests in the judiciary — EJWalters · 2026-10-23