Security researchers CloudSEK and Hudson Rock disclosed a significant supply-chain attack targeting LiteLLM, an open source package designed to streamline AI-driven software development. The compromised software exposed credentials and sensitive information belonging to numerous major organizations, with companies including Microsoft, Amazon, Cisco, Samsung, and Salesforce among those affected.
The attack occurred during a 40-minute window in March when users downloaded infected versions of LiteLLM from the official Python Package Index repository. The attackers obtained a 195-terabyte file containing cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys. Security researchers determined that approximately 434,000 continuous integration and continuous delivery (CI/CD) software pipelines had their credentials exposed. The gang known as TeamPCP claimed responsibility for the attack, which researchers largely corroborated.
LiteLLM was compromised as part of a broader supply-chain campaign that also affected other widely-used tools including the vulnerability scanner Trivy, as well as KICS and the Telnyx Python SDK. The infected software contained code that accessed machine memory, scraped its contents, and exfiltrated the data through attacker-controlled channels. Independent security researcher Kevin Beaumont verified the legitimacy of the exposed data and noted that many organizations remain unaware of their exposure, with some failing to properly rotate credentials even after notification.
Both security firms urged affected organizations to immediately rotate all credentials and audit their environments for the compromised LiteLLM versions. Hudson Rock recommended aggressive credential revocation procedures and validation of all cloud keys, Kubernetes tokens, and repository authentication credentials. The incident highlighted vulnerabilities in organizations’ rapid integration of AI tools into development pipelines without adequate security measures. Industry observers emphasized that the 40-minute compromise window affecting hundreds of thousands of downstream users demonstrates the scale and severity of modern supply-chain attacks.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI