October 2026 security incidents: LiteLLM, eMudhra, Hetzner and Andromeda remediated

October 2026 incident reports show rapid containment: attackers breached the LiteLLM release pipeline and published malicious version 1.107.0 to PyPI and Docker Hub, pulled within two to three hours. eMudhra's weak intermediate certificate keys, Hetzner's PHP flaws CVE-2026-109618 and CVE-2026-109619, and an Andromeda credential breach were also remediated.

• Malicious LiteLLM 1.107.0 was removed from PyPI and Docker Hub within 2–3 hours
• All eight eMudhra CAs generated ECC private keys under 256 bits, one value was 4
• Hetzner patched CVE-2026-109618 and CVE-2026-109619 across PHP 5.6–8.5
• Andromeda disabled compromised accounts; models and training data untouched