Cyber OSINT and Kimberly cite reporting that the LiteLLM supply chain attack targeted token secrets and persisted across CI CD systems, with at least one company describing itself as among many affected.
Zscaler reported a March 2026 surge in software supply-chain attacks, highlighting Axios NPM compromise and TeamPCP’s LiteLLM breach, which targeted token secrets and persisted across CI/CD systems.
The Register | AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security