LiteLLM Incident Response Guide

By Arthi Rajendran. Published March 28, 2026. Updated October 4, 2026.

A free, plain-English incident response guide for the LiteLLM supply-chain attack. On 24 March 2026, versions 1.82.7 and 1.82.8 were on PyPI for 46 minutes. Futuresearch counted 46,996 downloads of those versions. 2,337 PyPI packages depend on LiteLLM, and 88% of them (2,054) had a version range that allowed the compromised releases. LiteLLM says an install between 10:39 and 16:00 UTC that day may still have received them.

Sources

• Futuresearch: from 10:39 to 11:25 UTC on 24 March 2026 (46 minutes), litellm 1.82.7 and 1.82.8 were downloaded 46,996 times. 2,337 PyPI packages depend on litellm, and 2,054 of them (88%) had version specs that allowed those versions.
• LiteLLM security update: versions 1.82.7 and 1.82.8 were live on PyPI from 10:39 UTC on 24 March 2026 for about 40 minutes. You may be affected if you installed via pip between 10:39 and 16:00 UTC. Those packages included a credential stealer.
• Wiz Research: PyPI quarantined malicious LiteLLM 1.82.7 and 1.82.8 at 11:25 UTC on 24 March 2026. The payload collects environment variables, including API keys and tokens.