Terabytes of credentials leaked in massive supply-chain attack
ID: 6a27c138-bb2f-52a0-a557-4e65420edaf3
STIX ID: report--6a27c138-bb2f-52a0-a557-4e65420edaf3
Feed Name: Ars Technica Security (category)
Threat Score
The report describes a supply-chain attack against the LiteLLM dependency that briefly (≈40 minutes) delivered malicious code to downstream builds, resulting in roughly 430,000 impacted instances and the harvesting of millions of secrets; affected organizations are urged to perform aggressive credential revocation, rotate cloud keys and tokens, and audit egress and logging, while examples show incomplete revocation can extend attacker access.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.