🚨 SUPPLY CHAIN BREACH ALERT 🚨

LiteLLM got rekt AGAIN. Version 1.107.0 is fully compromised.

What's stolen:
• Cloud credentials
• AI API keys
• SSH private keys
• Pretty much everything sensitive

Worse: Remote code execution enabled. Auto-runs on Python startup.

Affected:
• PyPI packages
• Docker images (including latest & main-stable tags)

Immediate action:
• DO NOT use v1.107.0
• Rebuild environments from clean images
• Rotate ALL exposed credentials NOW
• Pin to v1.106.2 if you need stable

Malicious releases pulled but damage may be done. If you touched 1.107.0, assume breach.

Stay paranoid. Supply chain attacks are the meta now.