Security Feed
  1. Archives

Mar 24 2026 Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens

Source

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of devices during the attack. [...]

Posted by Lawrence Abrams on Tue 24 March 2026 in BleepingComputer.

Tags: Security.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • Biz & IT
  • Microsoft
  • Security Blog
  • AI
  • Security & Identity
  • Google
  • CryptoCurrency
  • Announcements
  • Foundational (100)
  • Legal
  • Artificial Intelligence
  • A Little Sunshine
  • privacy
  • Mobile
  • Apple
  • squid
  • hacking
  • LLM
  • Advanced (300)
  • Intermediate (200)
  • The Coming Storm
  • Technical How-to

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.