Terabytes of credentials leaked in massive supply-chain attack
Covered by 2 sources
Read the full articleA supply-chain attack on the open source AI development tool LiteLLM exposed terabytes of credentials from over 2,500 organizations, including Microsoft, Amazon, and Cisco. The breach occurred during a 40-minute window in March via compromised versions of LiteLLM downloaded from the official Python Package Index. The attack was linked to a previous compromise of the Trivy vulnerability scanner and claimed by the hacker group TeamPCP.
