https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/