AI Security Incident
Evidence indicates that the affected technology is affected by a security issue.
What Happened
Evidence indicates that the affected technology is affected by a security issue.
Why This Matters
Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.
Exposure
Mar 26, 2026 05:30
Mar 26, 2026 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Mar 26, 2026 05:30BugSkan first recorded this incident.
-
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise - www.trendmicro.com
Mar 26, 2026 05:30trendaisecurity.com · Malware
Sources
trendaisecurity.com · Mar 26, 2026 05:30
TeamPCP orchestrated a sophisticated supply chain attack, compromising the Trivy security scanner's CI/CD pipeline to publish malicious versions of the LiteLLM AI proxy package to PyPI. These trojanized versions deployed a multi-stage payload for credential harvesting, Kubernetes lateral movement, and persistent remote code execution.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.