Compromised litellm PyPI Package Delivers Multi-Stage Credential Stealer

This morning, the widely used Python package litellm, a popular abstraction layer for interacting with large language models (LLMs), was compromised and two malicious versions released (1.82.7 and 1.82.8).

First seen on securityboulevard.com

Jump to article: securityboulevard.com/2026/03/compromised-litellm-pypi-package-delivers-multi-stage-credential-stealer/