LiteLLM supply chain attack: an explainer for identity pros

On March 24, 2026 threat actor TeamPCP published malicious LiteLLM PyPI package updates (versions 1.82.7 and 1.82.8) that installed a persistent infostealer on affected systems; the payload collected environment variables, SSH/Git/CI and cloud credentials, configuration files and host details and exfiltrated compressed data to attacker-controlled servers during a ~5.5-hour window, potentially impacting hundreds of thousands of users who upgraded via PyPI.