Package Registry Malware

A backdoored LiteLLM package cleared 119,000 downloads before PyPI quarantined it

Install hooks and .pth files execute before your first import, which puts the useful controls in resolver precedence and environment scope rather than in a test suite that passes either way.