LiteLLM supply-chain compromise distributes malicious PyPI releases

On 24/03/2026, a compromised Trivy dependency used in LiteLLM's CI/CD environment exposed release credentials that attackers used to publish malicious LiteLLM versions 1.82.7 and 1.82.8 through the legitimate PyPI distribution channel. The packages contained credential-stealing code capable of collecting and exfiltrating secrets from downstream systems. LiteLLM reported that the malicious releases were available for about 40 minutes before PyPI quarantined them, and downstream user Mercor later confirmed that it was affected by the LiteLLM supply-chain attack. The incident therefore compromised the integrity of LiteLLM's legitimate software-delivery chain and propagated malicious code to downstream consumers.