Sponsor of the Day:
Jerkmate
https://www.harness.io:443/blog/litellm-compromise-securing-ai-pipelines-from-pypi-supply-chain-attacks
LiteLLM Compromise: Securing AI Pipelines from PyPI Supply C
LiteLLM PyPI was compromised in a supply chain attack, using .pth files and blockchain C2 to steal credentials and execute persistent, multi-stage malware. |...
securing aipypi supplylitellmcompromisepipelines
https://www.infoq.com/news/2026/03/litellm-supply-chain-attack/
PyPI Supply Chain Attack Compromises LiteLLM, Enabling the Exfiltration of Sensitive Information -...
Mar 31, 2026 - Discovered by FutureSearch researcher Callum McMahon, a supply chain attack against LiteLLM on PyPI resulted in over 40 thousand downloads of a compromised...
pypi supply chainsensitive informationattackcompromiseslitellm
https://www.giskard.ai/knowledge/litellm-supply-chain-attack-2026
How the LiteLLM PyPI Supply Chain Attack Happened — and What to Do If You're Affected
On March 24 2026, attackers published two malicious versions of the litellm Python library to PyPI, stealing SSH keys, cloud credentials, and Kubernetes...
pypi supply chainlitellmattackhappenedaffected
https://phoenix.security/teampcp-litellm-supply-chain-compromise-pypi-credential-stealer-kubernetes/
LiteLLM Backdoored by TeamPCP: PyPI Supply Chain Attack (2026)
Mar 30, 2026 - TeamPCP backdoored LiteLLM v1.82.7 and v1.82.8 on PyPI with a credential stealer, K8s lateral movement, and persistent backdoor. Full IOCs, detection, and...
pypi supply chainattack 2026litellmbackdooredteampcp
https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-teampcp-supply-chain-campaign/
LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign | Datadog...
On March 24 and 27, 2026, malicious PyPI releases of LiteLLM and Telnyx were published as part of the TeamPCP supply chain campaign. We trace the full campaign...
teampcp supply chainlitellmtelnyxcompromisedpypi
https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/
Supply Chain Attack in litellm 1.82.8 on PyPI
Mar 24, 2026 - litellm version 1.82.8 on PyPI contains a malicious .pth file that harvests SSH keys, cloud credentials, and secrets on every Python startup, then attempts...
supply chain attack1 82litellmpypi
https://www.helpnetsecurity.com/2026/03/25/teampcp-supply-chain-attacks/
LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks - Help Net Security
Mar 27, 2026 - A slew of supply chain attacks against popular open source tools and packages appears to have been orchestrated by TeamPCP cybercriminals.
teampcp supply chainlitellm pypipackages compromisedattacks helpexpanding
https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/
TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise - Infosecurity Magazine
Apr 9, 2026 - Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group
supply chain campaignlitellm pypiinfosecurity magazineteampcpexpands
https://blog.securelayer7.net/pypi-litellm-supply-chain-attack/
PyPI litellm Supply Chain Attack Explained: Risks & Prevention
litellm supply chainattack explainedrisks preventionpypi
https://my.diffend.io/pypi
PyPI - Mend - Supply Chain Defender
mend supply chainpypidefender