A major software supply chain breach involving LiteLLM has reportedly exposed credentials, cloud keys, API tokens, and internal configuration data from thousands of enterprise CI/CD environments. Forensic investigations by Snyk, Trend Micro, and Cycode show that LiteLLM was not the initial target. The attack reportedly began when threat actor TeamPCP compromised the GitHub Actions pipeline […]
The post LiteLLM Supply Chain Breach Spreads Credential Stealer Across Thousands of Enterprise CI/CD Environments appeared first on Cyber Security News.