LiteLLM supply chain attack potentially exposes 2,500 companies

A supply chain attack targeting the LiteLLM open-source AI gateway has potentially exposed over 2,500 organizations and 434,000 CI/CD pipeline runs. The incident occurred when attackers compromised the release process for the Trivy scanner, allowing poisoned code to enter the LiteLLM build pipeline and produce malicious packages on PyPI.

Two compromised versions, 1.82.7 and 1.82.8, were available for approximately 40 minutes on March 24. The malicious payload was designed to steal credentials, including cloud keys, SSH keys, Kubernetes tokens, database passwords, and LLM API keys. Analysts from CloudSEK have attributed the campaign to TeamPCP and released a public lookup tool to help organizations identify potential exposure.

While the dataset identifies major entities such as NVIDIA, Cisco, Deloitte, Volkswagen, FedEx, Siemens, and X Corp as potentially affected, researchers note that exposure does not confirm a successful breach of every named organization. Both LiteLLM and CloudSEK advise affected parties to rotate all credentials immediately.