Trivy, Not LiteLLM Behind the 2,500 Org Compromise

A recent compromise affecting 2,500 organizations has been found to not be caused by malicious LiteLLM packages. The majority of affected companies, over 95%, were exposed before these packages were even published, suggesting an alternative vulnerability was exploited. The actual cause of the compromise is attributed to Trivy.