Terabytes of credentials leaked in massive supply-chain attack:
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/
Story Details
| Last Updated | |
| Total Articles | 5 |
Main Topics
field that develops and studies software enabling machines to exhibit intelligent behavior
More articles on this subject
Previous
Terabytes of credentials leaked in massive supply-chain attack: The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/
Next
Similar to This
Previous
LiteLLM release pipeline hacked to distribute info-stealer malware: Hackers compromised the LiteLLM project's PyPI package and published malicious Docker ...
bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/
Australia arrests alleged TeamPCP hackers behind supply-chain attacks: Australian authorities have arrested and charged two young men accused of belonging to ...
bleepingcomputer.com/news/security/australia-arrests-alleged-teampcp-hackers-behind-supply-chain-attacks/
blog.gitguardian.com Aug 15
Inside the LiteLLM Hack: 153GB and 2,488 Organizations: Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March ...
blog.gitguardian.com/inside-the-litellm-hack/
After supply chain attack: Huge data leak affects countless large corporations - | Golem.de
golem.de/news/nach-supply-chain-angriff-riesiges-datenleck-betrifft-unzaehlige-grosse-konzerne-2608-211886.html
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
dlvr.it Apr 28
Don't pay Vect a ransom - your data's likely already wiped out: : 'Full recovery is impossible for anyone, including the attacker'
theregister.com/2026/04/28/dont_pay_vect_a_ransom/
dlvr.it Apr 23
Another npm supply chain worm is tearing through dev environments: : Plus, the payload references 'TeamPCP/LiteLLM method'
theregister.com/2026/04/22/another_npm_supply_chain_attack/
The New Stack Apr 12
How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers
thenewstack.io/teampcp-trivy-supply-chain-attack/
dlvr.it Apr 11
Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise
theregister.com/2026/04/11/trivy_axios_supply_chain_attacks/
dlvr.it Apr 02
AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack
theregister.com/2026/04/02/mercor_supply_chain_attack/
Report: Cybercriminals steal Cisco source code using stolen credentials: After the supply chain attack on LiteLLM, attackers were able to access internal Cisco ...
heise.de/news/Bericht-Cyberkriminelle-stehlen-Quellcode-von-Cisco-und-dessen-Kunden-11244097.html
Extortion expected: Hackers want to monetize massive supply chain attack - | Golem.de
golem.de/news/erpressungen-erwartet-hacker-wollen-riesige-supply-chain-attacke-zu-geld-machen-2603-206984.html
Delve did the security compliance on LiteLLM, an AI project hit by malware: LiteLLM offers an AI open source project used by millions that was infected by ...
techcrunch.com/2026/03/25/delve-did-the-security-compliance-on-litellm-an-ai-project-hit-by-malware/
github.com Mar 24
[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 — credential stealer · Issue #24512 · BerriAI/litellm
github.com/BerriAI/litellm/issues/24512
![[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82 ...](https://external-preview.redd.it/g3OVbihu9P9KL-zBTK3LLmDTCyYwSLxtG1SVLH4jXsU.png?width=320&crop=smart&auto=webp&s=06d885e59ee473641e1886ca4cfd876839d82c47)
Next