
- Popular Python package LiteLLM compromised in supply chain attack
- Malicious updates (v1.82.7, v1.82.8) deployed TeamPCP Cloud Stealer infostealer
- Attack harvested cloud credentials, Kubernetes secrets, wallets; users urged to rotate tokens and revert to safe versions