LiteLLM PyPI Supply-Chain Attack: Malicious Versions Published
On March 27, 2026, malicious versions (1.82.7 and 1.82.8) of the LiteLLM library were published on PyPI for approximately 40 minutes as part of a supply-chain attack.
Key points
- Malicious versions (1.82.7 and 1.82.8) of LiteLLM were published on PyPI.
- The malicious packages were available for approximately 40 minutes on March 27, 2026.
- The attack aimed to exfiltrate credentials from affected systems.
Connected intelligence
Signal brief
Follow the organization, likely method and potential impact to explore connected Shadow Tier intelligence.
Organization
- Published
- Mar 27, 2026
- Updated
- Jul 2, 2026
- Confidence
- High
- Evidence
- 2 sources
Structured assessment
Signal analysis
It helps compare this signal with other published signals without treating the labels as final determinations.
Threat source
Watch exposure paths that could affect data, operations or third-party trust.
Business impact
- Impact area
- Unknown
- Likely asset
- Server or cloud data store
Mentioned entities
Quick context
Questions about this signal
What happened in this signal?
On March 27, 2026, malicious versions (1.82.7 and 1.82.8) of the LiteLLM library were published on PyPI for approximately 40 minutes as part of a supply-chain attack. These compromised versions were designed to exfiltrate credentials from any system that installed them, affecting a significant percentage of cloud environments.
When was this signal reported?
Shadow Tier lists Mar 27, 2026 as the signal date.
Which organization is connected to this signal?
Pypi is the organization connected to this public signal.
Explore PypiWhich impact area is relevant?
This signal is connected to data exposure and breach intelligence based on its reported consequences.
Explore data exposure and breach intelligence