LiteLLM Supply Chain Attack: What Happened, Who’s Affected, and What You Should Do Right Now

On March 24, 2026, the Python package litellm, essential for numerous AI agent frameworks, suffered a supply chain attack that compromised the security of millions of downloads by publishing malicious versions (1.82.7 and 1.82.8) to PyPI. The attacker accessed the maintainer's credentials, likely via a related GitHub Actions compromise, and introduced two sophisticated techniques to execute harmful code upon installation or Python environment startup. This attack targeted various credentials, including cloud, SSH, Kubernetes, and database configurations, encrypting and exfiltrating them to a malicious domain. Comet's response involved a comprehensive audit of their repositories, developer machine scans, and immediate credential rotations, ensuring that no production data was compromised. The attack highlighted the importance of several security practices, such as using lockfiles, pinning dependencies to exact versions, and auditing CI/CD secret scoping to prevent similar vulnerabilities. Following the incident, the compromised versions were removed from PyPI, and the current version was resolved to a safe state, with affected environments advised to recreate and rotate credentials.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.