LiteLLM Supply Chain Attacks — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

April 23, 2026

Last Seen

April 23, 2026

Related Threat Clusters

Bitwarden CLI Compromised in Supply Chain Attack via npm
A malicious version of the Bitwarden CLI password manager was distributed via npm, affecting version 2026.4.0 for a brief window on April 22, 2026. The attack exploited a compromised GitHub Action in Bitwarden's CI/CD…

18 articles · Updated April 24, 2026

Recent Intelligence Reports

Bitwarden CLI npm package compromised to steal developer credentials — Bleepingcomputer · April 23, 2026

Related Entities

TeamPCP Malware Supply Chain Attack Checkmarx Supply Chain Attack Trivy Supply Chain Attacks AWS Azure Checkmarx T1003 - OS Credential Dumping T1059 - Command and Scripting Interpreter T1567 - Exfiltration Over Web Service GitHub