> LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign
[DATE: 24/03/2026 00:00]
[LANGUAGE: EN]
On March 24, 2026, two PyPI releases of LiteLLM were published with malicious code. We trace the full TeamPCP supply chain campaign from Trivy through npm, Checkmarx, and into LiteLLM.