#ci-cd

Trivy supply chain attack infects 1,000+ cloud environments, drags LiteLLM down with it

TeamPCP compromised the Trivy vulnerability scanner and used stolen credentials to poison LiteLLM on PyPI. Over 1,000 cloud environments are confirmed affected, with Mandiant warning the number could reach 10,000. Here is the timeline, the blast radius, and what you need to do right now.