NewsPublished 12 Aug 2026

Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack

Source SecurityWeek

Description

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack appeared first on SecurityWeek .

Impact

The attack exposed a wide range of sensitive secrets and credentials across thousands of organizations and hundreds of thousands of CI/CD pipelines. This exposure could enable attackers to take over accounts, steal data, inject malicious code, maintain persistence, move laterally within networks, disrupt services, and deploy further malware. The compromised secrets include package publishing credentials, cloud service keys, SSH keys, tokens, environment variables, runtime data, and AI provider keys. The broad impact affects major global enterprises and critical infrastructure sectors, increasing the risk of follow-on attacks and data breaches.

Defensive guidance

Organizations should assume all secrets accessible to the compromised LiteLLM versions (1.82.7 and 1.82.8) are compromised. They should immediately validate and rotate all potentially exposed credentials, including service accounts and sessions. Logs should be reviewed to determine the scope and timeframe of exposure. Removal of the malicious package versions from environments is necessary, but not sufficient due to potential credential theft. Strengthening token management and securing build pipelines to prevent token leakage is critical to avoid similar supply chain attacks.

Summary

LiteLLM was indirectly compromised via the Trivy open source vulnerability scanner supply chain attack. The threat actor TeamPCP exploited a leaked token to inject malicious code into LiteLLM's build and release pipeline, pushing tainted versions 1.82.7 and 1.82.8 to PyPI. The malicious payload executed on every Python invocation without explicit import, allowing attackers to harvest sensitive information including package publishing credentials, cloud keys, SSH keys, tokens, environment variables, runtime data, and AI provider keys. The compromised packages were live for approximately 40 minutes, sufficient time to propagate the malware and expose 434,000 CI/CD pipelines and over 2,500 organizations globally. The incident highlights the cascading risk in software supply chains and the criticality of securing build systems and tokens. CloudSEK recommends validating and rotating all potentially compromised secrets and reviewing logs to assess exposure.

References

securityweek.com/over-2500-organizations-impacted-by-litellm-supply-chain-attack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 12 Aug 2026, 09:56 UTC

References

Community reviews

Related threats