Terabytes of credentials leaked in massive supply-chain attack

A supply-chain attack compromised an open source AI tool called LiteLLM, exposing sensitive credentials belonging to thousands of organizations including major technology and industrial companies. During a 40-minute window in March, attackers distributed malicious versions of the software through official repositories, which then scraped and exfiltrated sensitive data such as cloud keys, access tokens, and passwords from affected machines. The attack was facilitated by a previous compromise of another widely used software tool, and security researchers attribute the scale of the breach to organizations' rush to integrate AI into their systems combined with poor security practices in software development pipelines. Both affected organizations and the cybersecurity industry have been advised to immediately rotate all exposed credentials and audit their environments for the compromised software versions.