LiteLLM Python Package With 95 Million Downloads Compromised by TeamPCP Hackers

A high-impact supply-chain compromise of the widely used PyPI package "litellm" (v1.82.7 and v1.82.8) injected a stealthy backdoor that executes on import and via a .pth startup file, enabling credential harvesting (SSH keys, cloud tokens, DB credentials, wallets), Kubernetes lateral movement, systemd-based persistence, and exfiltration to attacker-controlled domains; the activity is attributed to TeamPCP and the impacted releases have been removed.