# The litellm PyPI compromise and how Chainguard Libraries blocked malicious releases

DevFeed: [The litellm PyPI compromise and how Chainguard Libraries blocked malicious releases](<https://devfeed.tech/articles/you-were-one-pip-install-away-from-the-litellm-breach-chainguard-customers-weren-t-13344.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/you-were-one-pip-install-away-from-a-breach-chainguard-customers-werent>)

Published: 2026-03-24T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [litellm](<https://devfeed.tech/topics/litellm.md>), [chainguard libraries](<https://devfeed.tech/topics/chainguard-libraries.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>)

Tags: [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [chainguard-libraries-for-python](<https://devfeed.tech/tags/chainguard-libraries-for-python.md>), [litellm](<https://devfeed.tech/tags/litellm.md>), [litellm-attack](<https://devfeed.tech/tags/litellm-attack.md>), [litellm-package](<https://devfeed.tech/tags/litellm-package.md>), [litellm-supply-chain-attack](<https://devfeed.tech/tags/litellm-supply-chain-attack.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [secure-packages](<https://devfeed.tech/tags/secure-packages.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>)

## AI overview

The article describes a litellm compromise on PyPI in which malicious releases were used to steal secrets. It states that Chainguard Libraries prevented exposure by rebuilding only verified source and blocking the malicious releases.

## Source excerpt

Hackers compromised litellm on PyPI to steal secrets. Chainguard Libraries prevented exposure by rebuilding only verified source, blocking malicious releases.