AI Supply-Chain Compromise

A widespread supply-chain attack, orchestrated by TeamPCP, injected credential-stealing malware into popular open-source projects like Trivy, KICS, LiteLLM, and Telnyx. This compromise resulted in the exfiltration of credentials and data from over a thousand downstream SaaS environments, with Mercor publicly confirming the theft of 4 TB of its data and source code.

What Happened

A widespread supply-chain attack, orchestrated by TeamPCP, injected credential-stealing malware into popular open-source projects like Trivy, KICS, LiteLLM, and Telnyx. This compromise resulted in the exfiltration of credentials and data from over a thousand downstream SaaS environments, with Mercor publicly confirming the theft of 4 TB of its data and source code.

Why This Matters

The evidence matters to defenders using the affected technology because it may place downstream environments at risk through compromised dependencies.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Apr 02, 2026 05:30

  BugSkan first recorded this incident.

• AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack - theregister.com
  Apr 02, 2026 05:30

  theregister.com · Research

Sources

My AI Stack Match