highb

#!/usr/bin/env python3
"""
detect_litellm_compromise.py

Detects compromised LiteLLM versions (1.82.7, 1.82.8) from the March 2026
TeamPCP supply chain attack, and identifies MCP servers/projects in your
environment that depend on LiteLLM directly or transitively.

Script has no dependencies, should run standalone if you have python3.

highb

import argparse
import multiprocessing
import argparse
import re
import hashlib
import sqlite3
import os
from collections import defaultdict
from tqdm import tqdm
from concurrent.futures import ProcessPoolExecutor

highb

### Keybase proof

I hereby claim:

  * I am highb on github.
  * I am bmh (https://keybase.io/bmh) on keybase.
  * I have a public key whose fingerprint is 4F3A 8F97 9EB4 7E8A 9584  3DE9 F698 04D7 8580 693D

To claim this, I am signing this object:

highb

<script src='http://cdnjs.cloudflare.com/ajax/libs/jquery/1.7/jquery.min.js'></script>
<div class="from">
	<label>Type here:</label>
	<textarea>Hello :trollface:</textarea>
</div>
<div class="to">
        <label>Use this:</label>
	<textarea></textarea>
</div>
<div class="preview">