LiteLLM Supply Chain Attack: How a Fake PyPI Package Targeted AI Developers' Credentials [2026]

LiteLLM Supply Chain Attack: How a Fake PyPI Package Targeted AI Developers' Credentials [2026] Sometime in late 2024, someone uploaded a Python package to PyPI that looked almost harmless. Plausible name. Listed litellm — one of the most popular LLM proxy libraries — as a dependency. And buried in its __init__.py , it ran a multi-stage infostealer that harvested AWS credentials, OpenAI API keys, and Kubernetes configs from every machine that installed it. I've been tracking supply chain attacks for years, but the LiteLLM supply chain attack stands out because of how precisely it targeted AI developers. If you're building anything with LLMs right now, this is a case study you can't afford to ignore. What Actually Happened in the LiteLLM Supply Chain Attack First thing to get straight: LiteLLM itself was never compromised. The legitimate litellm package on PyPI — the one maintained by BerriAI — remained clean throughout. What happened was more subtle and, honestly, more dangerous. Attac