Trend Micro Research and others describe compromised LiteLLM package versions that could steal cloud credentials, with Mercor confirming breach fallout, underscoring how AI tooling dependencies can become credential theft vectors.
AI firm Mercor confirms a breach linked to the #LiteLLM supply chain attack, as hackers claim 4TB of stolen data.
AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack
A supply chain breach in the LiteLLM PyPI package exposed AI environments due to compromised versions that could steal cloud credentials before a script even runs.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security