PANews reported on March 25 that 23pds, Chief Information Security Officer of SlowMist Technology, posted on the X platform: "LiteLLM, which has been downloaded 97 million times per month, has been attacked by the PyPI supply chain: sensitive information can be stolen by installing litellm with pip, including SSH keys, cloud credentials (AWS/GCP/Azure), Kubernetes configurations, Git credentials, environment variables (API keys), shell history, encrypted wallets and database passwords, etc."