LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks
· Source: helpnetsecurity.com
In short
The TeamPCP cybercriminal group has compromised BerryAI's LiteLLM library by uploading malicious versions to PyPI that include credential stealers and malware droppers. This supply chain attack targets the critical position of LiteLLM in the AI stack, allowing attackers to intercept sensitive configuration data and API keys from applications leveraging multiple AI service providers. The attack follows similar patterns used against other open source tools including Aqua's Trivy security scanner and CheckMarx's VS Code extensions.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 13, 2026: AI-Driven Execution and Security Shift Supply Chain Into High-ROI Operating Systems
Tags: cybersecurity, supply-chain, malware, open-source, PyPI, AI