News for hackers. Stuff that matters.
Re:Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised by xenophonf on Wednesday March 25, 2026 @08:26PM (#47525236)
PyPI enforces immutable releases.

https://pypi.org/help/#file-name-reuse

> PyPI does not allow for a filename to be reused, even once a project has been deleted and recreated...

> This ensures that a given distribution for a given release for a given project will always resolve to the same file, and cannot be surreptitiously changed one day by the projects maintainer or a malicious party (it can only be removed).

There are no comments on this comment yet.