A massive supply-chain attack on LiteLLM has leaked terabytes of sensitive credentials. Attackers harvested cloud keys, repository tokens, and AI secrets during a brief March window.

With 2,500+ organizations compromised, including tech giants like Microsoft and Samsung, the blast radius is catastrophic. Hackers are now using these stolen keys to move laterally across networks.

Immediate rotation and strict dependency hygiene are mandatory.