2026-03-24 · 2026-Q1
LiteLLM Supply Chain Attack by TeamPCP
PrimaryL1CredentialSecondaryL4Code / PackageL7Build / Approval
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- Yes
- Actor:
- Attacker
Target
LiteLLM (3.4M daily PyPI downloads)
Impact
Three-stage malware: credential theft, K8s lateral movement, persistent systemd backdoor; fork bomb bug triggered discovery; available ~3 hours before quarantine
Root Cause
PyPI credentials stolen from LiteLLM CI environment during Trivy compromise