Compromised LiteLLM versions uploaded to PyPI stole credentials and access tokens. CloudSEK has identified more than 2,500 potentially affected organizations linked to the TeamPCP campaign.