31.1K
JU🚅What do you think about the LiteLLM hack?
My detailed analysis:
A hacker group called TeamPCP has been quietly running one of the most destructive supply chain campaigns ever seen. They first hijacked Trivy, a trusted open-source vulnerability scanner used by millions, by exploiting a misconfiguration in its GitHub automation to steal a privileged access token. They then modified existing version tags in Trivy’s repository, injecting malicious code into workflows that organizations were already running, with no visible warning that anything had changed.
🔧 LiteLLM’s build pipeline included Trivy but wasn’t locked to a specific version. When it ran a routine security scan on March 24, the poisoned Trivy silently stole LiteLLM’s PyPI publishing credentials from memory. Minutes later, the attackers used those credentials to publish two backdoored versions of LiteLLM directly to PyPI, the official Python package registry.
🔓 The malware inside those packages stole SSH keys, cloud tokens, Kubernetes secrets, crypto wallets, Slack and Discord keys, and .env files, then quietly exfiltrated everything to attacker-controlled servers. It also deployed a persistent backdoor disguised as a system monitoring service, and in Kubernetes environments, attempted to spread itself across every node in the cluster.
⏱️ The malicious versions were live on PyPI from 10:39 AM to roughly 2:35 PM UTC, under 4 hours. But LiteLLM gets downloaded 3.4 million times a day, and TeamPCP claims to have stolen data from hundreds of thousands of devices. In total, the broader campaign across Trivy, Checkmarx, npm and LiteLLM is estimated to have exfiltrated over 300 GB of compressed credentials, affecting 500,000+ corporate identities.
🚅 LiteLLM is present in 36% of all cloud environments, meaning the blast radius is massive, and many developers don’t even know they use it because it often comes bundled as a hidden dependency inside other AI tools.
#litellm #ai #hack #internet #opensource pip pypi package
@jugaldb
![#Teampcp Reel by @iamrahultyagi - [ 2 Minute VIDEO] TeamPCP Supply Chain Attack: How the Trivy & LiteLLM Hack Exposed Global Secrets EXPLAINED!
From automated shadow vendor discovery](https://image.pictame.com/img/657686244_18570755989023713_6961345201902586809_n.jpg?hash=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)
