Attackers compromised the release pipeline for LiteLLM, an open-source AI gateway, and published a malicious version that stole cloud credentials, developer secrets, and AI keys. The incident highlights the security risks facing widely used open-source infrastructure.
LiteLLM hit by a second supply-chain attack this year
Attackers compromised the release pipeline for LiteLLM, an open-source AI gateway, and published a malicious version that stole cloud credentials, developer secrets, and AI keys. The incident highlights the security risks facing widely used open-source infrastructure.
Source: The Register