The Scariest Attack in Modern Software Just Happened and a Bug Saved Us All

On March 24, 2026, a poisoned version of LiteLLM landed on PyPI. LiteLLM is the Python library used by over 40,000 open-source projects and pulled down 97 million times every single month. The moment you ran pip install litellm, your machine began quietly sending everything to an attacker's server. SSH keys. AWS credentials. Kubernetes secrets. Crypto wallets. Database passwords. Shell history. Every API key in your .env file. All of it. Encrypted and gone. The attack would have run silently for weeks across thousands of companies if the attacker had written cleaner code. They did not. And that sloppiness is the only reason this story ends the way it does. Andrej Karpathy called it exactly what it is: the scariest thing happening in modern software right now.