LiteLLM critical security compromise – check your environments

[mattbit]

LiteLLM has been compromised via a PyPI supply chain attack. Details: BerriAI/litellm#24512

Are Giskard packages affected?
Not directly. However, litellm may be present in your environment if you installed giskard[llm], giskard-agents, or giskard-checks (alpha).

What should you do?
If you've worked on any Python project recently (with or without giskard), check whether you're affected. LiteLLM is present as a transitive dependency for many common packages. You can:

• We've drafted a simple bash script to automatically check for indications of compromise (check_litellm_compromise.sh)
• Or check manually per the guidance in this writeup