Back to article
Datadog Security Labs

LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign (opens in new tab)

Covered by 5 sources See all sources covering this story including Andrew Nesbitt, datadoghq.comDiscussed on Hacker News

Covered in 5 articles

Andrew Nesbitt·

GitHub Actions security in Python packages

Feeds
datadoghq.com·

From single pull requests to full software packages: Detecting malicious code at scale

Feeds
venturebeat.com·

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering

Feeds
blog.pecar.me·

🎲 How to Safely Update Your Dependencies

Feeds
SiliconANGLE·

Forcepoint details TeamPCP supply chain attack that turned LiteLLM into a credential stealer

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help