Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised

A critical supply-chain attack compromised Litellm 1.82.7 and 1.82.8 on PyPI, accumulating 202 points and 314 comments in an urgent Hacker News thread. Malicious code in the AI infrastructure library, affecting over 50,000 monthly downloads, injects unauthorized network calls that exfiltrate API keys. Developers must immediately audit their dependencies and roll back to version 1.82.6, as the security breach outperforms the severity of #5's typical dependency risks. At least 14 distinct threat indicators were identified in the compromised packages, making this the most actionable security alert on today's list.