Terabytes of organizational identity data exposed in a supply chain attack on LiteLLM

Summary

A supply chain attack on the open-source Python library LiteLLM exposed terabytes of sensitive organizational identity data, affecting over 2,500 organizations and 430,000 CI/CD pipelines.

Why it matters

The incident highlights the fragility of modern software supply chains; compromising a single dependency can lead to massive data breaches across global enterprises. It underscores the need for stricter verification of open-source packages and rapid credential rotation in automated build environments.

Highlights

• Compromised versions (1.82.7 and 1.82.8) were published on PyPI, allowing attackers to harvest all data processed by LiteLLM.
• The malicious payload executed on every system where the package was installed, spreading across CI/CD pipelines within minutes.
• Over 2,500 organizations—including giants like Nvidia, AWS, and Siemens—were listed as potentially affected.

Critical take

The reported figures may overstate the actual impact; CloudSEK cautions that being listed does not necessarily mean each organization was breached or that all identity data was stolen.