Conversation
There was a problem hiding this comment.
Pull request overview
Adds a prominent security advisory to the LiteLLM tutorial to warn readers about a reported malicious PyPI wheel for a specific LiteLLM version.
Changes:
- Inserted a
::: dangeradmonition describing thelitellm==1.82.8PyPI wheel incident. - Added recommended remediation steps and links for further details.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
src/app/tutorials/litellm.md
Outdated
| # Using LiteLLM with Shift | ||
|
|
||
| ::: danger | ||
| **March 24, 202610:52 UTC** |
There was a problem hiding this comment.
The timestamp formatting is missing a space between the year and time (currently March 24, 202610:52 UTC). This reads like a typo and may render awkwardly; consider using a consistent format like March 24, 2026 10:52 UTC (or an ISO-8601 timestamp).
| **March 24, 202610:52 UTC** | |
| **March 24, 2026 10:52 UTC** |
src/app/tutorials/litellm.md
Outdated
|
|
||
| The recommended actions to take are: | ||
|
|
||
| - PyPI: Yank/remove `litellm 1.82.8` immediately. |
There was a problem hiding this comment.
This bullet is a bit ambiguous for the tutorial audience: PyPI: Yank/remove ... reads like an instruction to PyPI itself. Consider rewording to clearly target the intended actor (e.g., package maintainers) and keep the version formatting consistent with the earlier litellm==1.82.8 notation.
| - PyPI: Yank/remove `litellm 1.82.8` immediately. | |
| - PyPI package maintainers: Yank/remove `litellm==1.82.8` from PyPI immediately. |
src/app/tutorials/litellm.md
Outdated
| The recommended actions to take are: | ||
|
|
||
| - PyPI: Yank/remove `litellm 1.82.8` immediately. | ||
| - Users: Check for `litellm_init.pth` in your site-packages/directory. |
There was a problem hiding this comment.
site-packages/directory looks like a typo/awkward phrasing in this context. Consider changing to something like “site-packages directory” (and optionally clarify typical locations, since it differs by venv vs system Python).
| - Users: Check for `litellm_init.pth` in your site-packages/directory. | |
| - Users: Check for `litellm_init.pth` in your site-packages directory (for example, in your virtual environment or system Python installation). |
No description provided.