Python Package Index — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

  A coordinated supply chain attack has been identified, targeting vulnerability researchers and penetration testers through malicious proof-of-concept (PoC) repositories on GitHub. The malware, named ChocoPoC, is a…

  10 articles · Updated July 1, 2026
• LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

  On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited…

  53 articles · Updated March 24, 2026

Recent Intelligence Reports

• Trojanized GitHub exploits deliver ChocoPoC malware via malicious Python dependencies — Feeds.4Sysops · July 2, 2026
• New ChocoPoC malware targets researchers via trojanized PoC exploits — Bleepingcomputer · July 1, 2026
• LiteLLM infected with credential-stealing code via Trivy — Theregister · March 24, 2026
• LiteLLM loses game of Trivy pursuit, gets compromised — Theregister · March 24, 2026

Related Entities