Robuta

Sponsor of the Day: Jerkmate
https://www.harness.io:443/blog/litellm-compromise-securing-ai-pipelines-from-pypi-supply-chain-attacks LiteLLM Compromise: Securing AI Pipelines from PyPI Supply C LiteLLM PyPI was compromised in a supply chain attack, using .pth files and blockchain C2 to steal credentials and execute persistent, multi-stage malware. |... securing aipypi supplylitellmcompromisepipelines https://www.infoq.com/news/2026/03/litellm-supply-chain-attack/ PyPI Supply Chain Attack Compromises LiteLLM, Enabling the Exfiltration of Sensitive Information -... Mar 31, 2026 - Discovered by FutureSearch researcher Callum McMahon, a supply chain attack against LiteLLM on PyPI resulted in over 40 thousand downloads of a compromised... pypi supply chainsensitive informationattackcompromiseslitellm https://www.giskard.ai/knowledge/litellm-supply-chain-attack-2026 How the LiteLLM PyPI Supply Chain Attack Happened — and What to Do If You're Affected On March 24 2026, attackers published two malicious versions of the litellm Python library to PyPI, stealing SSH keys, cloud credentials, and Kubernetes... pypi supply chainlitellmattackhappenedaffected https://phoenix.security/teampcp-litellm-supply-chain-compromise-pypi-credential-stealer-kubernetes/ LiteLLM Backdoored by TeamPCP: PyPI Supply Chain Attack (2026) Mar 30, 2026 - TeamPCP backdoored LiteLLM v1.82.7 and v1.82.8 on PyPI with a credential stealer, K8s lateral movement, and persistent backdoor. Full IOCs, detection, and... pypi supply chainattack 2026litellmbackdooredteampcp https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-teampcp-supply-chain-campaign/ LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign | Datadog... On March 24 and 27, 2026, malicious PyPI releases of LiteLLM and Telnyx were published as part of the TeamPCP supply chain campaign. We trace the full campaign... teampcp supply chainlitellmtelnyxcompromisedpypi https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/ Supply Chain Attack in litellm 1.82.8 on PyPI Mar 24, 2026 - litellm version 1.82.8 on PyPI contains a malicious .pth file that harvests SSH keys, cloud credentials, and secrets on every Python startup, then attempts... supply chain attack1 82litellmpypi https://www.helpnetsecurity.com/2026/03/25/teampcp-supply-chain-attacks/ LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks - Help Net Security Mar 27, 2026 - A slew of supply chain attacks against popular open source tools and packages appears to have been orchestrated by TeamPCP cybercriminals. teampcp supply chainlitellm pypipackages compromisedattacks helpexpanding https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise - Infosecurity Magazine Apr 9, 2026 - Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group supply chain campaignlitellm pypiinfosecurity magazineteampcpexpands https://blog.securelayer7.net/pypi-litellm-supply-chain-attack/ PyPI litellm Supply Chain Attack Explained: Risks & Prevention litellm supply chainattack explainedrisks preventionpypi https://my.diffend.io/pypi PyPI - Mend - Supply Chain Defender mend supply chainpypidefender