Tag

#litellm

Analysis PyPI python

The AI Gateway Attack Surface: What TeamPCP's First Move Actually Opened

TeamPCP looted LiteLLM in 46 minutes. A patient attacker uses the same proxy position for far more. Three surfaces your AI security posture isn't covering.

Daniel Malvaceda · May 31, 2026 · 18 min read

Incident Critical npm PyPI openvsix

TeamPCP Part II: Backdooring the AI Credentials Vault

TeamPCP's endgame: LiteLLM's PyPI wheel backdoored post-build, .pth system-wide persistence, and why AI gateways are a new class of supply chain target.

Daniel Malvaceda · Apr 1, 2026 · 27 min read