Someone Found a Live Malware Campaign on PyPI by Accident

A developer debugging a frozen laptop stumbled onto litellm 1.82.8, a weaponized package designed to steal SSH keys, AWS credentials, and just about everything else on your machine.