Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Malicious versions of LiteLLM were uploaded to PyPI for a brief period in March, containing code that could steal sensitive credentials. These malicious releases were available for about 40 minutes before being removed. The stolen credentials could include cloud keys, SSH keys, Kubernetes tokens, and database passwords. A dataset obtained by CloudSEK, comprising around 434,000 captured files, suggests that over 2,100 organizations may have been exposed. The dataset is being used to map the potential extent of the exposure.