LiteLLM Supply-Chain Hack Exposes 2,500 Firms and 434k CI/CD Pipelines
CloudSEK discovered that malicious LiteLLM packages on PyPI were live ~40 minutes, stealing cloud credentials that could affect over 2,500 organizations and 434,000 CI/CD pipelines. The breach proves a single AI‑tool supply‑chain compromise can cascade across software delivery, prompting urgent credential rotation and AI‑focused security monitoring.