Wire · technology
Terabytes of credentials leaked in massive supply-chain attack
◆ Sectors
◆ Source
◆ Verified
Fusion42 · 12 August 2026 · Fusion42 review
A supply-chain attack on the open source AI tool LiteLLM exposed terabytes of credentials from over 2,500 organisations, including major companies like Microsoft, Amazon, and Salesforce, with attackers exploiting compromised software packages to scrape and exfiltrate sensitive data in a brief 40-minute window.
This Wire brief sits within Fusion42's coverage of AI Infrastructure. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.
◆ ◆ The Wire takeaway
Your cloud and software pipeline credentials are vulnerable to extraction through compromised open source AI tools like LiteLLM. Change your exposed secrets immediately and reassess your dependency on open source AI packages downloaded from public repositories.
◆ Related on Wire
◆ Topics