Tagged with

2 articles found

Supply Chain Hemorrhage: How LiteLLM’s PyPI Compromise Exposed Half a Million Dev Machines

Deep technical analysis of the TeamPCP supply chain attack on LiteLLM versions 1.82.7/1.82.8, the multi-stage credential stealer payload, and why your AI infrastructure is only as strong as its weakest dependency.

#litellm#python#teampcp

litellm

PyPI’s Silent Killer: How a .pth File Stole Your Secrets Without a Single Import

The Litellm supply chain attack reveals a devastating blind spot in Python’s dependency model, malicious code that executes before you even import the package.

#litellm#malware#pypi...