the payloads run on every python start on the machine and not just when you import litellm. Your IDE, pip, CI jobs everything python on that host is affected.
It steals ssh keys, aws credentials, browser passwords, shell history and AI coding tool configs. The backdoor runs as a …

