PSA: if you use LiteLLM, versions 1.82.7 and 1.82.8 are compromised and **actively exfiltrating credentials**: env vars, SSH keys, AWS/GCP/Azure creds, etc. (Similarly, if you use Trivy, there are also compromised versions.) This is part of an ongoing supply chain attack on the open-source ecosystem. More details for [LiteLLM here](https://github.com/BerriAI/litellm/issues/24518) and on the [kill chain here](https://ramimac.me/teampcp/#references). No BAML services are affected - we have no LiteLLM dependency - but since we know at least some of you use LiteLLM, posting here to raise awareness.