Last week, two versions of litellm package (3.4M downloads/day) contains malicious code due to previous compromise of maintainer's PyPI credentials. This seems as a cool trick to be less vulnerable to such attacks (found on LinkedIn / Hacker news) 👇