AI Infrastructure LiteLLM Supply Chain Poisoning Alert
· Source: securityboulevard.com
In short
NSFOCUS Technology CERT detected a supply chain poisoning attack on the LiteLLM AI model gateway, where the TeamPCP group compromised the security scanning tool Trivy to steal publishing credentials and release malicious versions 1.82.7 and 1.82.8. The attack steals sensitive data including SSH keys, cloud service certificates, and cryptocurrency wallets, and can deploy persistent backdoors in Kubernetes clusters. LiteLLM, with about 95 million monthly downloads, serves as a critical infrastructure component for managing large language models across enterprises.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 13, 2026: AI-Driven Execution and Security Shift Supply Chain Into High-ROI Operating Systems
Tags: supply-chain, security, AI-gateway, cybersecurity, automation, infrastructure