Mar 24, 2026
1 new drain.
New
-
Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers
On 24 March 2026 attackers tracked as TeamPCP published LiteLLM 1.82.7 and 1.82.8 to PyPI with hidden code that runs on import, and in 1.82.8 whenever Python starts. LiteLLM is a popular open-source gateway that AI apps and agents use to reach many LLM providers, with over 3.4 million downloads a day. The payload collected SSH keys, cloud credentials, Kubernetes secrets, .env files and crypto wallet data and sent them to a lookalike domain. Both versions were removed; anyone who installed them should rotate secrets and move funds from wallets on affected machines.
LiteLLM on PyPI·Multiple EVM chains·Since Mar 24, 2026·