Robuta

Sponsor of the Day: Jerkmate
https://www.itpro.com/security/litellm-pypi-compromise-everything-we-know-so-far LiteLLM PyPI compromise: Everything we know so far | IT Pro Mar 26, 2026 - The TeamPCP hacking group is believed to have successfully backdoored the package to harvest credentials litellm pypicompromiseeverythingknowfar https://www.giskard.ai/knowledge/litellm-supply-chain-attack-2026 How the LiteLLM PyPI Supply Chain Attack Happened — and What to Do If You're Affected On March 24 2026, attackers published two malicious versions of the litellm Python library to PyPI, stealing SSH keys, cloud credentials, and Kubernetes... pypi supply chainlitellmattackhappenedaffected https://www.helpnetsecurity.com/2026/03/25/teampcp-supply-chain-attacks/ LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks - Help Net Security Mar 27, 2026 - A slew of supply chain attacks against popular open source tools and packages appears to have been orchestrated by TeamPCP cybercriminals. teampcp supply chainlitellm pypipackages compromisedattacks helpexpanding https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise - Infosecurity Magazine Apr 9, 2026 - Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group supply chain campaignlitellm pypiinfosecurity magazineteampcpexpands https://www.trendmicro.com/en_us/research/26/c/your-ai-stack-just-handed-over-your-root-keys-inside-the-litellm-pypi-breach.html Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach | Trend Micro (US) Litellm PyPI breach explained: malicious versions steal cloud credentials, SSH keys, and Kubernetes secrets. Learn impact and urgent mitigation steps. trend micro usai stacklitellm pypihandedroot https://www.openwall.com/lists/oss-security/2026/03/24/6 oss-security - litellm pypi packages compromised, infostealer added oss securitylitellm pypipackages compromisedinfostealeradded https://www.harness.io:443/blog/litellm-compromise-securing-ai-pipelines-from-pypi-supply-chain-attacks LiteLLM Compromise: Securing AI Pipelines from PyPI Supply C LiteLLM PyPI was compromised in a supply chain attack, using .pth files and blockchain C2 to steal credentials and execute persistent, multi-stage malware. |... securing aipypi supplylitellmcompromisepipelines https://www.infoq.com/news/2026/03/litellm-supply-chain-attack/ PyPI Supply Chain Attack Compromises LiteLLM, Enabling the Exfiltration of Sensitive Information -... Mar 31, 2026 - Discovered by FutureSearch researcher Callum McMahon, a supply chain attack against LiteLLM on PyPI resulted in over 40 thousand downloads of a compromised... pypi supply chainsensitive informationattackcompromiseslitellm https://lwn.net/Articles/1064479/ LiteLLM on PyPI is compromised [LWN.net] This issue report describes a credential-stealing attack buried within LiteLLM 1.82.8 in the Py [...] litellmpypicompromisedlwn https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-teampcp-supply-chain-campaign/ LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign | Datadog... On March 24 and 27, 2026, malicious PyPI releases of LiteLLM and Telnyx were published as part of the TeamPCP supply chain campaign. We trace the full campaign... teampcp supply chainlitellmtelnyxcompromisedpypi https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/ Supply Chain Attack in litellm 1.82.8 on PyPI Mar 24, 2026 - litellm version 1.82.8 on PyPI contains a malicious .pth file that harvests SSH keys, cloud credentials, and secrets on every Python startup, then attempts... supply chain attack1 82litellmpypi https://www.infoworld.com/article/4149909/pypi-warns-developers-after-litellm-malware-found-stealing-cloud-and-ci-cd-credentials-2.html PyPI warns developers after LiteLLM malware found stealing cloud and CI/CD credentials | InfoWorld Mar 25, 2026 - The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes configs, SSH keys, and automation... litellm malwarefound stealingci cdpypiwarns https://blog.securelayer7.net/pypi-litellm-supply-chain-attack/ PyPI litellm Supply Chain Attack Explained: Risks & Prevention litellm supply chainattack explainedrisks preventionpypi https://phoenix.security/teampcp-litellm-supply-chain-compromise-pypi-credential-stealer-kubernetes/ LiteLLM Backdoored by TeamPCP: PyPI Supply Chain Attack (2026) Mar 30, 2026 - TeamPCP backdoored LiteLLM v1.82.7 and v1.82.8 on PyPI with a credential stealer, K8s lateral movement, and persistent backdoor. Full IOCs, detection, and... pypi supply chainattack 2026litellmbackdooredteampcp https://www.csoonline.com/article/4149905/pypi-warns-developers-after-litellm-malware-found-stealing-cloud-and-ci-cd-credentials.html PyPI warns developers after LiteLLM malware found stealing cloud and CI/CD credentials | CSO Online Mar 25, 2026 - The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes configs, SSH keys, and automation... litellm malwarefound stealingci cdcso onlinepypi