LiteLLM Supply-Chain Attack Threatens Over 2,500 Companies

LiteLLM is an open-source package that gives developers a unified way to connect applications with multiple large-language-model providers. Its use in software development and deployment pipelines makes a compromise particularly consequential: malware inserted into the package could spread through downstream environments, exposing API keys and other sensitive credentials rather than remaining confined to a single tool or vendor.

CloudSEK said its latest investigation found that the supply-chain attack could affect more than 2,500 companies and organizations worldwide, along with about 434,000 CI/CD workflows. Nvidia and Samsung were among the major companies identified as potentially exposed. Investigators warned that API keys and sensitive credentials may have been stolen, though confirmed misuse has not been established. The supplied report did not specify the attack date or the investigation’s publication date.