Forcepoint details TeamPCP supply chain attack that turned LiteLLM into a credential stealer (opens in new tab)

A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that compromised LiteLLM, a widely used open-source Python library that serves as a unified gateway to more than 100 large language model providers, turning two malicious releases of the package into a credential-stealing tool aimed at cloud and artificial intelligence […] The post Forcepoint details TeamPCP supply chain attack that turned LiteLLM into a credential stealer app...