> TritonInfoSec News
Home / Aug 13, 2026 / Story
0
#3 The Hacker News general August 12, 2026 at 08:04 UTC

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

By [email protected] (The Hacker News)

AI Summary

Two malicious LiteLLM releases were pushed to PyPI in March 2026 via the Trivy supply chain hack, remaining available for approximately 40 minutes before removal — yet credential-stealing code captured data from 434,000 files across 2,100+ organizations. Stolen data included cloud API keys, SSH keys, Kubernetes tokens, and database passwords, making this one of the most impactful AI-toolchain supply chain attacks to date.

Read full article → https://thehackernews.com/2026/08/malicious-litell…

Relevance score: 89.0/100

# More from August 13

  1. 1
    Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days BleepingComputer
  2. 2
    Lazarus hackers exploited Windows zero-day to target defense firms BleepingComputer
  3. 4
    Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access The Hacker News
  4. 5
    Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws The Hacker News
  5. 6
    Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS The Hacker News
  6. 7
    SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code The Hacker News
  7. 8
    Sandworm hackers target IT pros with trojanized WireGuard VPN client BleepingComputer
  8. 9
    DeadLock ransomware uses blockchain to resist infrastructure takedown BleepingComputer
  9. 10
    Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA Dark Reading