package-audit

Python's site-packages mechanism executes any line starting with `import` in a *.pth file at interpreter startup, before user code runs. The compromised litellm 1.82.7/1.82.8 (PyPI, ~40 min live, 2026...