Summary
The TeamPCP threat group executed a massive supply-chain attack against LiteLLM by exploiting a vulnerability in the Trivy scanner to steal PyPI publishing credentials. The breach exposed 195TB of cloud keys, repository tokens, and AI API keys belonging to over 2,500 organizations worldwide.
Take Action:
Assume anything you pull from a public registry can turn hostile overnight: pin dependencies and CI actions to an exact verified hash, never let build pipelines install tools "latest" from a package manager, and keep build machines on short-lived, least-privilege credentials so a poisoned package steals little and only briefly. Then rehearse the recovery: know which secrets each pipeline can reach, be able to rotate them all in hours rather than weeks, and watch your build systems for outbound connections and new persistence just as closely as you watch production.
Read the full article on BeyondMachines
This article was originally published on BeyondMachines
