On October 22, 2026, BleepingComputer reported LiteLLM, PyPI, Docker. The framing is mine. Their sentences stay on their page.
The names I am willing to repeat are LiteLLM, PyPI, Docker. The subject words I am keeping are credentials.
If this sits on a shop, a clinic, or a desk I run, I read the vendor notice before I tell anyone to patch.
Source I used: BleepingComputer. The link is under this column.