Skip to content

Added LiteLLM vulnerability warning.#349

Merged
Corb3nik merged 3 commits intomainfrom
AP-LiteLLM-Warning
Mar 24, 2026
Merged

Added LiteLLM vulnerability warning.#349
Corb3nik merged 3 commits intomainfrom
AP-LiteLLM-Warning

Conversation

@ninjeeter
Copy link
Copy Markdown
Contributor

No description provided.

@ninjeeter ninjeeter requested review from Corb3nik and Sytten March 24, 2026 18:00
@ninjeeter ninjeeter marked this pull request as ready for review March 24, 2026 18:04
Copilot AI review requested due to automatic review settings March 24, 2026 18:04
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a prominent security advisory to the LiteLLM tutorial to warn readers about a reported malicious PyPI wheel for a specific LiteLLM version.

Changes:

  • Inserted a ::: danger admonition describing the litellm==1.82.8 PyPI wheel incident.
  • Added recommended remediation steps and links for further details.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

# Using LiteLLM with Shift

::: danger
**March 24, 202610:52 UTC**
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The timestamp formatting is missing a space between the year and time (currently March 24, 202610:52 UTC). This reads like a typo and may render awkwardly; consider using a consistent format like March 24, 2026 10:52 UTC (or an ISO-8601 timestamp).

Suggested change
**March 24, 202610:52 UTC**
**March 24, 2026 10:52 UTC**

Copilot uses AI. Check for mistakes.

The recommended actions to take are:

- PyPI: Yank/remove `litellm 1.82.8` immediately.
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This bullet is a bit ambiguous for the tutorial audience: PyPI: Yank/remove ... reads like an instruction to PyPI itself. Consider rewording to clearly target the intended actor (e.g., package maintainers) and keep the version formatting consistent with the earlier litellm==1.82.8 notation.

Suggested change
- PyPI: Yank/remove `litellm 1.82.8` immediately.
- PyPI package maintainers: Yank/remove `litellm==1.82.8` from PyPI immediately.

Copilot uses AI. Check for mistakes.
The recommended actions to take are:

- PyPI: Yank/remove `litellm 1.82.8` immediately.
- Users: Check for `litellm_init.pth` in your site-packages/directory.
Copy link

Copilot AI Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

site-packages/directory looks like a typo/awkward phrasing in this context. Consider changing to something like “site-packages directory” (and optionally clarify typical locations, since it differs by venv vs system Python).

Suggested change
- Users: Check for `litellm_init.pth` in your site-packages/directory.
- Users: Check for `litellm_init.pth` in your site-packages directory (for example, in your virtual environment or system Python installation).

Copilot uses AI. Check for mistakes.
@caidobot caidobot temporarily deployed to AP-LiteLLM-Warning - documentation PR #349 March 24, 2026 18:27 — with Render Destroyed
@Corb3nik Corb3nik merged commit 261c242 into main Mar 24, 2026
4 checks passed
@Corb3nik Corb3nik deleted the AP-LiteLLM-Warning branch March 24, 2026 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants