Supply chain attacks are increasing in volume, but open source vulnerabilities continue relatively unnoticed.

A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials such as environment variables, SSH keys, and passwords.