Litellm on PyPI has been compromised with a credential stealing payload. Litellm is a core dependency across oss stacks (ollama even). If you have auto updates to anything that uses litellm or downloaded litellm after march 24, downgrade to 1.82.6 or lower.
