Am I Compromised by LiteLLM? Check the 2026 Supply Chain Attack
Think you may be compromised by LiteLLM? Learn which LiteLLM versions were malicious, how to use the CloudSEK lookup, what to check, and which credentials to rotate.
7 min read
Topic
PyPI Malware
Every article tagged PyPI Malware, newest first.
3 articles
Related topics
- TeamPCP, 2 articles
- AWS SSM propagation, 1 article
- CI/CD Security, 1 article
- Credential Theft, 1 article
- durabletask PyPI compromise, 1 article
- FIRESCALE dead drop, 1 article
- GitHub token exfiltration, 1 article
- Kubernetes Security, 1 article
- LiteLLM, 1 article
- LiteLLM compromised, 1 article
- LiteLLM supply chain attack, 1 article
- Python Backdoor, 1 article
Articles tagged PyPI Malware
The durabletask PyPI Compromise: TeamPCP Attacks Azure Pipelines
Prevent the durabletask PyPI compromise. Learn how TeamPCPs rope.pyz malware steals cloud credentials, propagates via SSM, and how to remediate.
8 min read
How TeamPCP Compromised (again) LiteLLM
TeamPCP strikes again. The popular Python package litellm (versions 1.82.7 and 1.82.8) was compromised on PyPI, deploying a credential harvester and Kubernetes backdoor.
6 min read
Keep reading
Latest from the blog
AI-Era CVE Trends: Discovery and Exploitation
Google's GTIG data shows CVE disclosures doubled in 2026, n-day exploitation is accelerating, and AI stacks are now targets. See what it means and how to respond.
13 min read
Cloudflare Agentic SOC: Managed Defense AI Harness Explained
Cloudflare Managed Defense is testing an evidence-grounded SOC harness with Clef and specialist AI agents. Learn how it works, what stays human-controlled, who can access the beta, and what agentic SOCs need next.
11 min read
Cloudflare CA: Free Post-Quantum Certificates with MTCs in 2027
Cloudflare plans free MTC certificates from 2027. See its new CA roadmap and current PQC services: Automatic Key Exchange, ML-DSA origin authentication, Tunnel, and certificate monitoring.
12 min read