LiteLLM PyPI Supply Chain - pip Install Triggering Unexpected Outbound C2 Callback

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•6

Detects instances where Python-related package management tools (python.exe, pip.exe) initiate external network connections shortly after executing install-related commands. This behavior may indicate an attempt to install malicious packages from untrusted repositories or a software supply chain compromise.