{
 "tag": "teampcp",
 "name": "Teampcp",
 "group": "Other",
 "incidents": [
  {
   "slug": "litellm-pypi-teampcp-credential-wallet-stealer-mar-2026",
   "title": "Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers",
   "url": "https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026",
   "json": "https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026.json",
   "status": "closed",
   "severity": "critical",
   "threatStatus": "contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The trojanized package was LiteLLM, a gateway library used to connect AI apps and agents to LLMs, so an AI tool was the delivery route; no AI model was manipulated."
   },
   "chains": [
    "multi-evm"
   ],
   "method": "supply-chain",
   "product": "LiteLLM on PyPI",
   "tags": [
    "multi-evm",
    "supply-chain",
    "litellm",
    "pypi",
    "teampcp",
    "llm-gateway",
    "ai-tooling",
    "infostealer",
    "trivy",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-03-24",
   "closedAt": "2026-03-24",
   "updatedAt": "2026-03-24T12:00:00Z",
   "summary": "On 24 March 2026 attackers tracked as TeamPCP published LiteLLM 1.82.7 and 1.82.8 to PyPI with hidden code that runs on import, and in 1.82.8 whenever Python starts. LiteLLM is a popular open-source gateway that AI apps and agents use to reach many LLM providers, with over 3.4 million downloads a day. The payload collected SSH keys, cloud credentials, Kubernetes secrets, .env files and crypto wallet data and sent them to a lookalike domain. Both versions were removed; anyone who installed them should rotate secrets and move funds from wallets on affected machines."
  }
 ],
 "changes": [
  {
   "incident": "litellm-pypi-teampcp-credential-wallet-stealer-mar-2026",
   "incidentTitle": "Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-03-24",
   "title": "Malicious LiteLLM 1.82.7 and 1.82.8 were published to PyPI with a credential and wallet stealer, and were later removed.",
   "sourceUrl": "https://www.bleepingcomputer.com/news/security/popular-litellm-pypi-package-compromised-in-teampcp-supply-chain-attack/",
   "url": "https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026"
  }
 ]
}