litellm version 1.82.8 on PyPI contains a malicious .pth file that harvests SSH keys, cloud credentials, and secrets on every Python startup, then attempts lateral movement across Kubernetes clusters.

Original Reddit post

submitted by /u/WhereSkyMeetsGround

Originally posted by u/WhereSkyMeetsGround on r/ArtificialInteligence