THREAT OPS › Threat News › LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign
LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign
On March 24 and 27, 2026, malicious PyPI releases of LiteLLM and Telnyx were published as part of the TeamPCP supply chain campaign. We trace the full campaign from Trivy through npm, Checkmarx, and into PyPI.