Country visual unavailable
No information
LiteLLM PyPI supply-chain compromise propagates to Mercor
On 24 March 2026 attackers hijacked LiteLLM publishing access and released malicious versions 1.82.7 and 1.82.8 through PyPI. The packages contained credential-stealing malware; Mercor later confirmed that it installed an affected LiteLLM version, experienced unauthorized activity and identified sensitive information belonging to a subset of its experts as affected.
76
Estimated severity
76 / 100
92
Source reliability
92 / 100
Approximate Date
2026-03-24
Targeted Company
BERRIAI
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
MERCOR (Software vendor)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
No information
Affected countries
No information
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionSupply chain data integrity impact
Affected sectors
Professional & Business ServicesTechnology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
MalwareSoftware supply chain compromiseUse of stolen credentials
Attributed threat actors
TEAMPCP