If you are still awake, better go to bed ... today never ends ... now its LiteLLM.
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
SafeDep - Real-time Open Source Software Supply Chain SecurityCompromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and BackdoorLiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.