A supply-chain attack on LiteLLM, an open-source AI development tool, exposed terabytes of credentials belonging to major organizations including Microsoft, Amazon, Cisco, Samsung, and Salesforce. Security firms CloudSEK and Hudson Rock reported that the stolen data includes cloud keys, repository tokens, SSH keys, Kubernetes secrets, and AI provider keys, potentially compromising over 2,500 companies.
The credentials were harvested during a 40-minute window in March after victims downloaded compromised versions of LiteLLM from the Python Package Index. Hudson Rock identified the breach while analyzing a 195TB file, though the source of the data remains unknown.
Comments