Last week, two versions of litellm package (3.4M downloads/day) contains malicious code due to previous compromise of maintainer's PyPI credentials.
This seems as a cool trick to be less vulnerable to such attacks (found on LinkedIn / Hacker news) π

