Terabytes of credentials leaked in massive supply-chain attack
Ars Technica Dan Goodin
A supply-chain hack on LiteLLM spilled terabytes of credentials. Microsoft, Amazon, Cisco, Samsung, and Salesforce were among the names exposed.
Based on reporting by Ars Technica, Dan Goodin — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
A supply-chain attack on LiteLLM, an open source tool used to streamline AI software development, has exposed terabytes of credentials tied to some of the world’s biggest and most sensitive organizations. Among the names mentioned are Microsoft, Amazon, Cisco, Samsung, and Salesforce. The scale is ugly even by breach standards, because the stolen material wasn’t just one kind of secret. It included cloud keys, repository tokens, SSH keys, Kubernetes secrets, package publishing credentials, environment variables, and AI provider keys.
CloudSEK and Hudson Rock disclosed the findings on Tuesday and Wednesday. CloudSEK said the exposed credentials could open the door to more than 2,500 organizations. Hudson Rock said it reached the discovery after analyzing a 195TB file it obtained. Neither company said where that file came from.
The theft happened in a 40-minute window in March, while victims were using compromised versions of LiteLLM downloaded from the project’s official location in the Python Package Index repository. That detail matters. This wasn’t a random trove sitting in some forgotten corner of the internet. It was pulled through a trusted software distribution path, which is exactly why supply-chain attacks keep landing such hard blows.
And the haul is broad enough to be a headache for a long time. Cloud keys can unlock infrastructure. SSH keys can open servers. Package publishing credentials can let attackers poison software updates. AI provider keys add another layer, because they can expose the systems people are now rushing to build on top of these tools.
My take — AI-written commentary, not fact-checked reporting
This is the kind of mess that keeps proving the same boring point: trust in the software supply chain is still doing far too much heavy lifting. Open source isn’t the problem; treating a package registry like a seatbelt is. If a tool can hand out access to thousands of organizations in 40 minutes, the real scandal is how normal that still feels.
Read more about this at: Ars Technica
