From a26f321d8ffde4ff4d92ed189f00eda9af9be1c6 Mon Sep 17 00:00:00 2001
From: Spyros <morfeas3000@gmail.com>
Date: Mon, 26 Oct 2026 10:40:50 +0000
Subject: [PATCH] fix(deps): keep litellm below 1.107 (reported malicious
 release)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index c55834701..881993797 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -43,7 +43,8 @@ semver
 python-markdown-maker
 
 # chat (/rest/v1/completion) — embed prompt via LiteLLM, match with sklearn
-litellm
+# 1.107.x reported malicious (2026-10-26): stay below it until a clean release is confirmed.
+litellm<1.107
 numpy
 scipy
 scikit-learn