The AI Supply Chain is Actually an API Supply Chain: Lessons from the LiteLLM Breach

The blog post discusses the Mercor/LiteLLM supply-chain incident in which compromised AI middleware (proxies, gateways, and MCP servers) can be used to exfiltrate API keys, unencrypted prompts, and raw model responses. It warns that legacy WAFs and API gateways are blind to machine-to-machine attacks, describes the risk as an "API supply chain" problem, and promotes Salt Security's Agentic Security Platform (AG-SPM and AG-DR) as a mitigation to detect, map, and interrupt such attacks.