LiteLLM Hit by Credential-Stealing Supply Chain Attack: Complete Technical Breakdown

What Happened: The Attack at a Glance On March 24, 2026, two versions of LiteLLM — the wildly popular Python library that routes API calls to OpenAI, Anthropic, Google, and 100+ other large language model providers — were published to PyPI carrying a sophisticated, multi-stage credential-stealing payload. LiteLLM, with more than 40,000 GitHub stars and approximately 97 million monthly downloads, is a foundational dependency across AI agent frameworks, MCP servers, and LLM orchestration tools w...