Skip to content
NewA calmer, faster ZeroHour
MalwarehighExploited in the wild

LiteLLM Supply-Chain Attack - Technology, Banking and Healthcare the Most Affected

Security Affairsby @securityaffairs ()2 min read1
Read at securityaffairs.com
AI summary · glm-5.3-flashSummaries by Vani AI

TeamPCP planted the SANDCLOCK credential stealer in LiteLLM PyPI releases, exposing credentials across 2,038 repositories at 898 organizations including Microsoft and NVIDIA.

Threat actor TeamPCP compromised LiteLLM maintainer credentials and published malicious versions 1.82.7 and 1.82.8 to PyPI around March 2026, creating an exposure window of several months. The SANDCLOCK credential stealer exposed full credential sets across 898 GitHub owners and 2,038 repositories, including Microsoft, Azure, IBM, NVIDIA, PayPal, Deloitte, Bosch, and S&P Global. Stolen material includes GitHub CI/CD identities, AWS/GCP/Firebase credentials, SSH keys, Kubernetes secrets, and OpenAI and Anthropic API keys; Resecurity acquired a 150GB archive with 2,146 credential records. Technology, banking/finance, and healthcare organizations are the most affected sectors, and victims must rotate all exposed credentials.

Key facts
  • Malicious LiteLLM versions 1.82.7 and 1.82.8 published to PyPI in March 2026
  • 898 compromised GitHub owners across 2,038 repositories identified
  • Victims include Microsoft, NVIDIA, PayPal, Deloitte, Bosch, and S&P Global
  • Exposed credentials span GitHub keys, cloud credentials, SSH keys, and AI API keys
  • Organizations urged to rotate keys, PATs, and tokens and invalidate sessions
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1195.002 Compromise Software Supply ChainT1528 Steal Application Access TokenT1552.001 Credentials In Files
Tags
ai-gatewaycredential-stealerlitellmpypisandclocksupply-chainteampcp
Vendors
LiteLLM
Products
LiteLLM
Threat actors
TeamPCP
Malware
SANDCLOCK
Victims
MicrosoftNVIDIAPayPalDeloitteBoschS&P Global
Organizations
ResecurityPyPI
AI models
OpenAIAnthropic

From the original article

2 min read at securityaffairs.com

The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected sectors by the “ SANDCLOCK ” backdoor , which was planted as a result of the code repository compromise. According to cybersecurity experts, LiteLLM / TeamPCP Supply-Chain Attack will have long-lasting consequences.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.