A supply-chain attack on LiteLLM, an open-source tool used to streamline AI development, exposed terabytes of credentials belonging to major organizations including Microsoft, Amazon, Cisco, Samsung, and Salesforce. Security firms CloudSEK and Hudson Rock reported that the leaked data included cloud keys, repository tokens, SSH keys, Kubernetes secrets, and AI provider credentials, potentially compromising access to more than 2,500 companies.
The credentials were stolen during a 40-minute window in March when victims installed compromised versions of LiteLLM from the official Python Package Index repository. Hudson Rock identified the breach after analyzing a 195TB file, though neither firm has determined the source of the attack.
Comments