LiteLLM Supply-Chain Attack Exposes Credentials at 2,500 Organizations
A compromised AI development tool exposed terabytes of credentials from over 2,500 organizations including Microsoft, Amazon, Nvidia, and Salesforce.
ARS TECHNICA — The attack affected 434,000 CI/CD pipelines during a 40-minute window in March. TeamPCP claimed responsibility and the breach included cloud keys, repository tokens, SSH keys, and API credentials.
Readers’ Forum
No contributions yet — open the debate.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.