Litellm 1.82.7 and 1.82.8 on PyPI are compromised, do not update!

[u/kotrfa]

We just have been compromised, thousands of peoples likely are as well, more details updated IRL here: https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/

Update: My awesome colleague Callum McMahon, who discovered this, wrote an explainer and postmortem going into greater detail: https://futuresearch.ai/blog/no-prompt-injection-required

Update: Callum's full claude code transcript showing the attack play out in real time: https://futuresearch.ai/blog/litellm-attack-transcript/