The March compromise of litellm lasted about 40 minutes on PyPI. This week we learned what the attackers stole in that time.On August 12, 2026, Hudson Rock published its analysis of the exfiltration archive: a 153GB RAR containing 433,909 files.

The March compromise of litellm lasted about 40 minutes on PyPI. This week we learned what the attackers stole in that time.On August 12, 2026, Hudson Rock published its analysis of the exfiltration archive: a 153GB RAR containing 433,909 files.