Am I Compromised by LiteLLM? Check the 2026 Supply Chain Attack
Think you may be compromised by LiteLLM? Learn which LiteLLM versions were malicious, how to use the CloudSEK lookup, what to check, and which credentials to rotate.
7 min read
Topic
PyPI Malware
Every article tagged PyPI Malware, newest first.
3 articles
Related topics
- TeamPCP, 2 articles
- AWS SSM propagation, 1 article
- CI/CD Security, 1 article
- Credential Theft, 1 article
- durabletask PyPI compromise, 1 article
- FIRESCALE dead drop, 1 article
- GitHub token exfiltration, 1 article
- Kubernetes Security, 1 article
- LiteLLM, 1 article
- LiteLLM compromised, 1 article
- LiteLLM supply chain attack, 1 article
- Python Backdoor, 1 article
Articles tagged PyPI Malware
The durabletask PyPI Compromise: TeamPCP Attacks Azure Pipelines
Prevent the durabletask PyPI compromise. Learn how TeamPCPs rope.pyz malware steals cloud credentials, propagates via SSM, and how to remediate.
8 min read
How TeamPCP Compromised (again) LiteLLM
TeamPCP strikes again. The popular Python package litellm (versions 1.82.7 and 1.82.8) was compromised on PyPI, deploying a credential harvester and Kubernetes backdoor.
6 min read
Keep reading
Latest from the blog
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
18 min read
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read