LiteLLM's Poisoned PyPI Packages Turned Dev Laptops Into Open Credential Safes
One pip install, and your AWS keys were gone. The LiteLLM attack shows developer laptops aren't just tools—they're attacker playgrounds loaded with plaintext secrets.
#pypi-supply-chain