From d1711c1b3e53124906294259248a4e36f8fa406a Mon Sep 17 00:00:00 2001 From: Akkari Date: Tue, 24 Mar 2026 16:09:11 -0700 Subject: [PATCH] pin litellm==1.82.0: v1.82.8 confirmed supply chain compromise litellm_init.pth in 1.82.8 contains base64-encoded payload that exfiltrates credentials and self-replicates. Pin to last known good version until BerriAI confirms remediation. Refs: requirements.txt, pyproject.toml --- reference-implementation/pyproject.toml | 2 +- reference-implementation/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/reference-implementation/pyproject.toml b/reference-implementation/pyproject.toml index adc4ea8..ec6edd6 100644 --- a/reference-implementation/pyproject.toml +++ b/reference-implementation/pyproject.toml @@ -14,7 +14,7 @@ readme = "README.md" license = {text = "MIT"} requires-python = ">=3.10" dependencies = [ - "litellm>=1.40.0", + "litellm==1.82.0", # PINNED: 1.82.8 confirmed compromised (2026-03-24), "pydantic>=2.0.0", "pyyaml>=6.0.0", "click>=8.0.0", diff --git a/reference-implementation/requirements.txt b/reference-implementation/requirements.txt index 7766326..6b31413 100644 --- a/reference-implementation/requirements.txt +++ b/reference-implementation/requirements.txt @@ -1,5 +1,5 @@ # Core dependencies -litellm>=1.40.0 +litellm==1.82.0 # PINNED: 1.82.8 confirmed compromised (2026-03-24) pydantic>=2.0.0 pyyaml>=6.0.0 click>=8.0.0