[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKVi86KNF1947BZw2l987yxVNHHOpBpuOC1p-7XycF6U":3},{"article":4,"iocs":54,"watch_terms":58,"solutions":59,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"ddf1fc53-3d6a-494c-8d3b-a1aca9de87f0","Trivy, Not LiteLLM Behind the 2,500 Org Compromise","trivy-not-litellm-behind-the-2-500-org-compromise-a26a1b","Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.","New analysis suggests that the majority of the 2,500 organizations impacted by the LiteLLM supply chain attack were actually compromised earlier via a vulnerability in Aqua Security's Trivy scanner. The threat actor, TeamPCP, leveraged the Trivy compromise to propagate malware, which then harvested credentials and secrets. While the LiteLLM packages were online for a short period, the data collection activity for most affected organizations ended before LiteLLM's publication, aligning with the Trivy incident timeline.","Trivy scanner compromise, not LiteLLM, led to 2,500 orgs being exposed.","https:\u002F\u002Fwww.securityweek.com\u002Ftrivy-not-litellm-behind-the-2500-org-compromise\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F12\u002Fblockchain-cryptocurrency-Solana.jpeg","2026-08-14T11:35:23+00:00","2026-08-14T12:00:24.499192+00:00",8,[17,20,22,25,28],{"name":18,"type":19},"Trivy","product",{"name":21,"type":19},"LiteLLM",{"name":23,"type":24},"TeamPCP","threat_actor",{"name":26,"type":27},"Aqua Security","vendor",{"name":29,"type":30},"CI\u002FCD","technology","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":31,"icon":33,"name":34,"slug":35},null,"Supply Chain","supply-chain",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":43,"value":56,"context":57},"Shai-Hulud worm","Threat actor TeamPCP behind the supply chain attack",[26,18,21],{"controls":60,"vendors":146},[61,90,119],{"slug":62,"name":63,"problem":64,"products":65},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":91,"name":92,"problem":93,"products":94},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":120,"name":121,"problem":122,"products":123},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[124,130,138],{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":125,"product_name":126,"url":128,"description":129},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",[],{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":163},"trivy-scanner-vulnerability-enabled-mass-credential-theft-across-2500-orgs","Trivy Scanner Vulnerability Enabled Mass Credential Theft Across 2,500 Orgs","The root compromise stemmed from a vulnerability in Aqua Security's Trivy scanner — a widely trusted security tool — which was exploited by threat actor TeamPCP to propagate malware and harvest credentials and secrets at scale. This incident highlights a deeply ironic and dangerous pattern: security tooling itself can become a high-value supply chain attack vector, precisely because it is trusted, widely deployed, and often granted elevated permissions. The misattribution to LiteLLM also underscores the importance of thorough forensic analysis to correctly identify root causes and timelines. Organizations that rely on open-source or third-party security tools without independently validating their integrity are exposed to significant risk, as a single compromised scanner can cascade across an entire infrastructure.",[152,153,154,155,156,157,158,159,160,161,162],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-161: Supply Chain Risk Management","NIST CSF ID.SC-4: Suppliers and third-party partners are routinely assessed","NIST SI-7: Software, Firmware, and Information Integrity","NIST RA-5: Vulnerability Monitoring and Scanning","NIST CM-8: System Component Inventory","SLSA Framework: Supply chain Levels for Software Artifacts","SSDF (NIST SP 800-218): Secure Software Development Framework","GDPR Article 32: Security of Processing (where EU personal data is involved)",{}]