Executive Summary
Analysis shows over 95% of the 2,500 affected organizations were exposed through the earlier Trivy compromise, not the malicious LiteLLM packages.
What Happened
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek .
Affected Products
- Trivy
- LiteLLM
Vulnerability / Attack Technique
Chained supply chain compromise
Technical Mechanism
A compromised scanner led to stolen tokens and later poisoned AI library releases.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI supply chain incidents often start in non-AI tooling.
Recommended Controls
- Rotate secrets exposed to Trivy and LiteLLM
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/trivy-not-litellm-behind-the-2500-org-compromise/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.