CloudSEK Links March LiteLLM Supply Chain Breach to 2,500 Organizations

CloudSEK revealed that over 2,500 organizations may have been exposed due to a March 2026 supply-chain attack involving malicious LiteLLM packages on PyPI, affecting approximately 434,000 CI/CD pipelines. The breach originated from a compromised token in the Trivy security scanner, which was exploited to inject malicious code into LiteLLM releases used in automated build systems.