OpenHands

The `litellm` package (versions 1.82.7 and 1.82.8) was flagged as *potentially compromised* in a security advisory on March 24, 2026. PyPI appears to have yanked the package, causing the OpenHands PR review action to fail when trying to install `openhands-sdk` (which depends on `litellm`).

`pip install litellm 2&gt;&amp;1`
Output:
```Defaulting to user installation because normal site-packages is not writeable
ERROR: Could not find a version that satisfies the requirement litellm (from versions: none)
ERROR: No matching distribution found for litellm```


The package is not just yanked (which would still show versions but warn against using them) - it's been *entirely removed* from the Python Package Index, likely as an emergency response to the compromise of versions 1.82.7 and 1.82.8.

<https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/>