TechCrunch, Techmeme, and others describe a supply chain attack involving LiteLLM and Trivy, with warnings that compromised build systems and stolen credentials can cascade across npm, PyPI, and GitHub Actions.
Mercor says it was hit by cyberattack tied to compromise of open-source LiteLLM project
Mercor confirmed it was affected by a recent supply chain attack involving LiteLLM;
Rundown of the very bad week in security: - TeamPCP (sophisticated hacking group) attacks: Hackers broke into the system that builds a oss popular security scanning tool called Trivy. This was a supply chain attack
Supply chain attacks are becoming more frequent, and far more serious.
If you’re coding on your laptop or most environments outside of Replit you might’ve been exposed to a massive JavaScript supply chain attack that can take over your computer.
This finding is one of many signals tracked across Indiehacking. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Indiehacking