Your Coding Agent's Supply Chain Is a Mess. Here's How to Harden It.

In March, a backdoored version of LiteLLM sat on PyPI for about three hours. It got downloaded roughly 47,000 times in that window. If you don't know LiteLLM, check your lockfile. It's the model gatew...