In March, a backdoored version of LiteLLM sat on PyPI for about three hours. It got downloaded roughly 47,000 times in that window. If you don't know LiteLLM, check your lockfile. It's the model gateway underneath CrewAI, DSPy, Microsoft GraphRAG, and a pile of other agent frameworks. There's a decent chance it's in your dependency tree without you ever having typed pip install litellm. Anyone who pulled an update during those three hours also pulled in an autonomous attack bot. I want to ...