[Security]: litellm PyPI package (v1.82.7 + v1.82.8) compromised!

[aig-]

LiteLLM versions 1.82.7 and 1.82.8 on PyPI were compromised. sentry-sdk publishes a LiteLLM integration and exposes a litellm extra / metadata reference. Please update the LiteLLM-related dependency constraints to exclude the compromised versions and clarify the recommended safe versions / mitigation for users.

Reference: BerriAI/litellm#24518

[linear-code]

PY-2265

[aig-]

In our case, LiteLLM is not installed or used directly - it appears only in the sentry-sdk / lock-file package metadata. Please review whether this metadata reference can be removed, because it triggers false-positive security findings.