Elon Musk
@elonmusk
Caveat emptor
Andrej Karpathy@karpathy· Mar 24, 2026Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database
11:56 PM · March 24, 2026 · 55.7M views
1.9K
2.7K
29.7K