safedep.io LiteLLM Supply Chain Attack Exposes Critical Credentials
Article Content
- •Two compromised LiteLLM versions on PyPI exfiltrated sensitive credentials.
- •Attack linked to TeamPCP, exploiting vulnerabilities in the Trivy scanner.
- •Malicious payloads targeted SSH keys, cloud credentials, and Kubernetes secrets.
On March 24, 2026, two versions of the LiteLLM Python package (1.82.7 and 1.82.8) were compromised on PyPI, embedding credential-stealing payloads. The attack, linked to the TeamPCP threat actor, exploited a vulnerability in the Trivy open-source scanner, allowing attackers to publish malicious versions. The payloads targeted sensitive information such as SSH keys, cloud credentials, and Kubernetes secrets, exfiltrating this data to an attacker-controlled server. The malicious version 1.82.8 introduced a .pth file for automatic execution, escalating the threat. The incident highlights the risks associated with supply chain attacks in software development environments. Security advisories have been issued, and further analysis is ongoing to mitigate the impact. The LiteLLM library is widely used, with millions of downloads daily, raising concerns about the broader implications of this breach.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track TeamPCP, Miasma and BerriAI in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
LiteLLM 1.107.0 Compromised: Credential Stealer and RAT Distributed via PyPI On October 21, 2026, the LiteLLM Python package version 1.107.0 was compromised in a supply chain attack, distributing malware that includes a credential stealer and a remote access trojan (RAT). The malicious code was injected into the package's wheels on PyPI and Docker images, affecting all platforms. The attack…