LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks

TeamPCP, a cybercriminal group, conducted a series of supply‑chain attacks compromising open‑source packages (including LiteLLM on PyPI) and associated GitHub workflows to deliver credential stealers, malware droppers, a Python backdoor, and a worm; affected parties are advised to remove malicious packages, rotate exposed credentials, and investigate for persistence and additional payloads.