Datadog Security Labs

A teenage hacking group called TeamPCP poisoned two releases of LiteLLM, an open-source AI gateway tool downloaded 95 million times, stealing over 500,000 credentials and 300 GB of data from more than…

On March 24, 2026, attackers compromised LiteLLM's CI/CD pipeline and uploaded malicious PyPI packages that stole credentials from environments with three million daily downloads. The incident highlig…