The LiteLLM packages were live for 40 minutes — the credentials they took are still being counted
2026-08-13AI
Two poisoned releases in March, published with a token stolen in the Trivy breach and kept alive by an incomplete rotation. CloudSEK's dataset of 434,000 captured files now maps possible exposure across 2,500+ organisations.