AI synthesis LiteLLM's PyPI packages v1.82.7 and v1.82.8 were compromised with credential-stealing code, impacting over 2,500 organizations in a supply chain attack linked to the Trivy breach.
What changed
Every report remains linked to its original publisher.
LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack appeared first on SecurityWeek.
LiteLLM Supply Chain Attack: Inside the AI Breach That Exposed 2,500+ Companies Key Takeaways The LiteLLM breach planted credential-stealing code in two PyPI releases, v1.82.7 and v1.82.8 , live for roughly 40 minutes on