# Credential Theft Threatens Thousands Due to Malicious LiteLLM Releases

*Published August 14, 2026*
*Source: [https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.html](https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.html)*

## Executive Summary

Malicious LiteLLM releases on PyPI, part of a broader supply-chain attack, exposed sensitive credentials from over 2,500 organizations. The compromised packages collected and exfiltrated data such as cloud keys and SSH tokens, prompting security advisories for credential rotation to prevent unauthorized access.

## Article

In March, two malicious releases of LiteLLM were uploaded to the Python Package Index (PyPI), containing code designed to steal credentials. This code was capable of collecting sensitive information such as cloud keys, SSH keys, Kubernetes tokens, and database passwords from systems that installed the compromised packages. The threat intelligence firm CloudSEK discovered that these releases potentially exposed sensitive information from over 2,500 organizations. This exposure is linked to a broader supply-chain attack associated with Aqua Security's Trivy scanner, which has been tracked as CVE-2026-33634.

The malicious LiteLLM packages, specifically versions 1.82.7 and 1.82.8, were made available on March 24 for a brief period before being quarantined by PyPI. However, it is advised that any installations made until 16:00 UTC that day should be considered suspect. The FBI has issued an advisory recommending that organizations rotate their CI/CD secrets, publishing tokens, and cloud credentials to mitigate the risk of unauthorized access through these compromised packages.

The attack involved the use of a PyPI API token, which was exposed through the compromised Trivy dependency. This token was then used to upload the malicious LiteLLM releases. The compromised packages were engineered to run malicious code at the startup of any Python process within the affected environments, potentially harvesting and encrypting sensitive data.

This incident is part of a larger campaign that has affected several high-profile organizations including NVIDIA, Cisco, and X Corp. It highlights the importance of moving away from long-lived credentials in favor of temporary ones to minimize the risk of exposure. Organizations impacted by this attack are urged to conduct a thorough review of their systems and rotate any potentially compromised credentials.