Trivy Flaw Behind 2,500-Org Breach, Not LiteLLM Packages
A compromise affecting over 2,500 organisations was initially attributed to malicious LiteLLM packages but has been re-attributed to Trivy, an open-source security scanner widely used in AI and cloud-native pipelines. Critically, over 95% of affected organisations were already exposed before the malicious LiteLLM packages were even published, pointing to a supply chain vulnerability in tooling infrastructure rather than the AI proxy layer. This incident underscores the risk of misattribution in supply chain attacks and highlights how AI-adjacent tooling can serve as an overlooked attack vector.