OpsDaddy @OpsDaddyAI

@elonmusk

A hacker group just compromised one of the most widely used security scanners in the world, and used it to steal half a million credentials from companies that trusted it to keep them safe. On March 19, a threat actor group called TeamPCP injected credential-stealing malware into Trivy, a popular open-source vulnerability scanner maintained by Aqua Security. Trivy is used by thousands of companies to scan their code and infrastructure for security flaws. The attackers compromised 75 GitHub Action tags, the Trivy Docker images, and related CI/CD pipelines, meaning every company running automated security scans through Trivy was unknowingly executing the attackers' code. The malware harvested SSH keys, cloud credentials, Kubernetes secrets, cryptocurrency wallets, and .env files from every environment it touched. The stolen data was encrypted and exfiltrated to attacker-controlled servers. But the attack didn't stop there. Using credentials stolen from Trivy's CI/CD pipeline, TeamPCP then backdoored LiteLLM, a widely used Python framework for managing AI model APIs. Two malicious versions (1.82.7 and 1.82.8) were pushed to PyPI, the main Python package repository. The second version was designed to execute automatically on every Python process startup in the environment, no user interaction required. From there, it deployed privileged pods across entire Kubernetes clusters and installed persistent backdoors on every node. The attackers also pushed compromised Docker images of Trivy (versions 0.69.4, 0.69.5, 0.69.6) to Docker Hub and compromised dozens of npm packages with a self-spreading worm called CanisterWorm. They even defaced 44 internal Aqua Security repositories in a scripted 2-minute burst, renaming them all with "TeamPCP Owns Aqua Security." According to the International Cyber Digest, which is in direct contact with the attackers, TeamPCP claims to have exfiltrated 300 GB of compressed credentials and is actively working through them. The LiteLLM compromise alone reportedly yielded half a million stolen credentials. The group says it is currently extorting several multi-billion-dollar companies. Each compromised environment yielded credentials that unlocked the next target. The pivot from CI/CD pipelines to production Python packages running in Kubernetes clusters was deliberate escalation. Security researchers say this campaign is "almost certainly not over." This is what a modern supply chain attack looks like. The tools companies trust to secure their infrastructure become the attack vector. The irony is brutal, the security scanner was the vulnerability.

🚨‼️ We're in contact with the actor behind the Trivy and LiteLLM hack. They told us they are currently extorting several multi-billion-dollar companies from which they've exfiltrated data. They've obtained 300 GB of compressed credentials and are working their way through them as we speak. The LiteLLM compromise alone led to half a million stolen credentials, according to the threat actor. Their message to the world: "TeamPCP is here to stay. Long live the supply chain." They've sent us their new logo (see image) and also teamed up with several threat actors, including Xploiters and Vect.

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

Daniel Hnyk @hnykda

4 months ago

LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below

306 2K 9K 5.9M 3K

@NuryVittachi Hold for 45 minutes.

@elonmusk You tried your best 🤣

@globaltimesnews Big Daddy.

@vivek_naskar Take care of the family.

@svembu Disappointed with ux. Give some time to ux, listen to someone who has sense of it. There is a reason people hate Microsoft teams even for enterprise use .

If you are an employee, the most certain product you own is yourself. 10 years from now, if the product sucks, you focused on wrong products.

@aravind It's true, not just a hypothesis. Not just for CEOs but for all hiring and promotion.

Enough of internet today.

Rakesh Krishnan Simha @ByRakeshSimha

10 months ago

British man: "They are taking all our jobs." Interviewer: "What qualifications do you have?" British man: "None. They are taking all our qualifications as well."

135 879 5K 151K 411

When China builds, you say it stole. When China sells, you say it cheats. When China grows, you say it threatens. But when you bomb, you say it liberates. When you sanction, you say it protects. When you steal, you say it secures. The real theft isn’t China’s technology. It’s America’s vocabulary.

In this world, the ones causing the most trouble are the ones who want the peace prize. What is happening in this world" - SALMAN 😅

News Algebra @NewsAlgebraIND

10 months ago

BIG NEWS 🚨 Salman Khan trolls Donald Trump on Bigg Boss 19 set 🤯😂 UNPRECEDENTED 😅 He said "Ye kya ho raha hai poori duniya me. Jo sabse zyada trouble phaila rahe hain, unhi ko peace prize chahiye" "In this world, the ones causing the most trouble are the ones who want the

121 592 6K 345K 209

@bissuusingh Plant some trees first, then some windows and gates.

@China_Amb_India I share the same line of thought. India and China have always been peace loving countries, except minor skirmishes. People need to think for themselves, free from the western propagandas.

@elonmusk Are you afraid of history repeating - KARMA.

Useless without Russian Oil.

Jackson Hinkle 🇺🇸 @jacksonhinkle

11 months ago

🇨🇳 China isn’t playing around

716 2K 22K 2.0M 728

This guy always brings his train.

Li Zexin 李泽欣 @XH_Lee23

11 months ago

🇨🇳🇰🇵 Kim Jong Un has arrived in Beijing for China's V-Day commemorations tomorrow morning.

10 48 513 30K 17

Fate of more babies is massive cheap local labour. Wish of every capitalist.

Elon Musk @elonmusk

11 months ago

Low birth rate is the number one threat to the West, followed closely by migration. There will be no West if this continues.

11K 14K 103K 23.7M 3K