---
id: 7692
title: "LiteLLM Supply Chain Compromise"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/ai-ml-pentesting/litellm-supply-chain-compromise/"
published_at: "2026-03-24T00:00:00Z"
tags: ["ai-security", "supply-chain", "incident-response", "credential-theft", "pypi", "llm", "cicd", "litellm"]
phying_url: "https://phying.com/item/7692"
lang: en
---

# LiteLLM Supply Chain Compromise

## Summary

Malicious PyPI builds of LiteLLM 1.82.7/1.82.8, published via a compromised maintainer account, exfiltrated API keys and system data, exposing a user's entire LLM provider surface.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2026-03-24T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/ai-ml-pentesting/litellm-supply-chain-compromise/
- **Phying News:** https://phying.com/item/7692