LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected

Resecurity and reporting describe a supply-chain attack where maintainer credentials for the LiteLLM project were compromised and malicious PyPI package versions (1.82.7, 1.82.8) were published by the threat actor 'TeamPCP' using the SANDCLOCK credential-stealer, exposing cloud and CI/CD credentials across 2,038 repositories and affecting thousands of organizations across technology, finance, healthcare and other sectors.