LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign | Datadog Security Labs

A sophisticated, multi-stage supply chain attack compromised the legitimate LiteLLM PyPI package (versions 1.82.7 and 1.82.8), exfiltrating credentials and enabling persistent access across developer and CI/CD environments, as part of a broader campaign targeting major open source projects in March 2026.