A poisoned LiteLLM 1.107.0 hit PyPI and Docker on October 21, 2026 and stole credentials. Who is affected, how the pipeline was beaten, what to rotate.