Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

LiteLLM

Disclosed Mar 24, 2026Unverified

Malware slipped into popular LiteLLM AI gateway package stole developer credentials

Credential-stealing malware entered the LiteLLM open source AI gateway through a compromised dependency and harvested logins from machines that installed it, spreading to further packages. The project is downloaded up to 3.4 million times a day, and the campaign was attributed to TeamPCP.

What is known

People affectedNot stated in the sources we have
DisclosedMar 24, 2026
AttackSupply chain
Data exposedCredentials and tokensAPI keys
SectorAI · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofTrivy (2026)

Sources

Newsbleepingcomputer.com
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens
Newstechcrunch.com
Silicon Valley's two biggest dramas have intersected: LiteLLM and Delve

Notices filed

TotalMar 24
ResearchCount not stated
TotalMar 26
ResearchCount not stated

Same campaign

CheckmarxSupply chain exposed credentials and tokens, API keys and source code.Supply chainTechILApr 26CiscoSupply chain exposed source code and API keys.Supply chainTechUSUnverifiedMar 31European CommissionSupply chain exposed names, emails, messages and internal documents.Supply chainGovernmentBEMar 27Aqua SecurityTrivy scanner releases and GitHub Actions hijacked to push credential stealerSupply chainTechILUnverifiedMar 21

Other breaches at LiteLLM

LiteLLM Compromised in Fresh Supply Chain AttackLiteLLM Compromised in Fresh Supply Chain AttackSupply chainUnverifiedOct 23
History of this record
summary2026-09-25
Versions 1.82.7 and 1.82.8 of the popular LiteLLM AI gateway package on PyPI were trojanized to steal cloud credentials, SSH keys, Kubernetes tokens and environment files. TeamPCP claimed data from hundreds of thousands of devices, with sou to Credential-stealing malware entered the LiteLLM open source AI gateway through a compromised dependency and harvested logins from machines that installed it, spreading to further packages. The project is downloaded up to 3.4 million times aby seedSource
title2026-09-25
LiteLLM PyPI package backdoored by TeamPCP to steal AI developer secrets to Malware slipped into popular LiteLLM AI gateway package stole developer credentialsby seedSource
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about LiteLLM