CloudSEK’s latest look at the LiteLLM incident has pushed the possible scale of the breach much higher. Data reconstructed from the wider TeamPCP and Trivy campaign points to environments linked with more than 2,500 organisations, although that number does not mean 2,500 organisations were definitely compromised.
The March incident involved malicious LiteLLM packages uploaded to PyPI. Researchers now say the campaign data contains about 434,000 captured files and exfiltration-related records, but those records should not be mistaken for 434,000 separate CI/CD pipelines.
