TeamPCP Hijacks LiteLLM's PyPI Package — Credential Stealer Hits 40k-Star Project

TeamPCP hijacked the LiteLLM PyPI package, deploying a stealthy credential stealer that auto-executes on every Python startup, exfiltrates cloud and infrastructure secrets at scale, and enables persistent Kubernetes cluster takeover—marking a major escalation in supply chain attacks targeting the AI developer ecosystem.