LiteLLM Supply Chain Attack: Inside the AI Breach That Exposed 2,500+ Companies

SOCRadar details the LiteLLM supply‑chain compromise in March 2026: TeamPCP (UNC6780) leveraged a hijacked Trivy scanner and unpinned dependencies to publish malicious LiteLLM releases to PyPI that executed at Python interpreter startup, stole a wide range of credentials (cloud, CI/CD, Kubernetes, AI keys), produced reconstructed exposure across 2,500+ organizations and ~434,000 CI/CD files, and saw the stolen data brokered and tied to ransomware affiliates — the report emphasizes broad rotation, pinning, and forensic response.