LiteLLM Supply Chain Attack Exposes Critical Credentials

On 2026-03-24, two versions of the widely used LiteLLM package on PyPI (1.82.7 and 1.82.8) were maliciously published and delivered credential-stealing payloads that targeted SSH keys, cloud credentials, and Kubernetes secrets; the incident is attributed to the TeamPCP actor and exploited a Trivy scanner vulnerability, with version 1.82.8 using a .pth file to force automatic execution—raising significant supply-chain and scale concerns and prompting security advisories.