Andrej Karpathy posted on the X platform that litellm suffered a PyPI supply chain attack. A simple `pip install litellm` command could steal SSH keys, AWS/GCP/Azure credentials, Kubernetes configurations, Git credentials, environment variables, encrypted wallets, SSL private keys, CI/CD keys, and database passwords. litellm has 97 million monthly downloads, and the risk could spread to all projects that depend on litellm, such as dspy. The maliciously injected version was released less than an hour ago, and was discovered when a flaw in the attack code caused Callum McMahon's machine to run out of memory and crash. Karpathy stated that supply chain attacks are one of the most threatening problems in modern software, as each dependency installation can introduce tampered packages deep into the dependency tree. He is therefore increasingly inclined to reduce dependencies and use LLM to directly implement simple functions.