2026-03-24 · 2026-Q1
LiteLLM Supply Chain Attack by TeamPCP
Should this run hold this key at all?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Attacker
Target
LiteLLM (3.4M daily PyPI downloads)
Impact
Three-stage malware: credential theft, K8s lateral movement, persistent systemd backdoor; fork bomb bug triggered discovery; available ~3 hours before quarantine
Root cause
PyPI credentials stolen from LiteLLM CI environment during Trivy compromise
Sources
Catalog
Cite this: AgentProv incident record: LiteLLM Supply Chain Attack by TeamPCP (2026-03-24). https://agentprov.com/incidents/2026-03-24-litellm-supply-chain-attack-by-teampcp
Related
- Same event · 2026-03-19Trivy GitHub Action Compromise by TeamPCPAdjacent ecosystem
- Same event · 2026-03-31Mercor Data Breach via LiteLLM Supply ChainL1Credential
- Same event · 2026-03-27Telnyx PyPI Supply Chain CompromiseL1Credential