Litellm upstream issue BerriAI/litellm#24512
Versions 1.82.7 onwards are compromised with a malicious litellm_init.pth. In the pyproject.toml, the version is pinned to "litellm>=1.63.14" which could lead to installation of the compromised package.
Reccomended fix is to pin "litellm>=1.63.14,<1.82.7" - though the offending versions have been yanked from pypi, best practices are to ensure the offending versions are pinned out.