Security firms CloudSEK and Hudson Rock disclosed that a supply-chain attack compromised LiteLLM, an open source tool used to streamline AI-driven software development. The attack exposed terabytes of credentials belonging to major organizations including Microsoft, Amazon, Cisco, Samsung, and Salesforce, among thousands of others.
The credentials were extracted during a 40-minute window in March when users downloaded compromised versions of LiteLLM from the official Python Package Index repository. CloudSEK identified cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, and AI provider keys that could grant attackers access to more than 2,500 organizations. Hudson Rock’s analysis of a 195-terabyte file revealed that approximately 434,000 continuous integration and continuous delivery pipelines had exposed credentials after running the compromised LiteLLM versions.
The LiteLLM compromise was part of a broader supply-chain attack campaign that also infected Trivy, a widely used vulnerability scanner, along with KICS and the Telnyx Python SDK. A group called TeamPCP claimed responsibility, and researchers have largely corroborated the claim. The compromised software contained code that accessed machine memory, scraped its contents, and transmitted the data through attacker-controlled channels.
Both security firms have urged affected organizations to immediately rotate credentials, audit their environments for the compromised software versions, and perform aggressive credential revocation. Independent researcher Kevin Beaumont confirmed the legitimacy of the exposed data and noted that some organizations have not taken the disclosure with appropriate seriousness, with credentials that were supposedly rotated remaining active weeks after the attack.
Security experts emphasized that this incident demonstrates the escalating threat posed by supply-chain attacks and the critical importance of maintaining vigilance around open source software usage. The 40-minute window of compromise led to exposure of secrets across hundreds of thousands of deployment pipelines, representing a significant shift in the scale and impact of such campaigns.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI