Artificial Intelligence

Mercor Targeted in LiteLLM Supply Chain Attack

Was the LiteLLM breach a contained incident or a national security catastrophe?

Published APR 2

Mercor Targeted in LiteLLM Supply Chain Attack

Story

Above: A photo illustration of a hacker using a laptop. Image credit: Seksan Mongkhonkhamsao/Getty Images

The Facts

The AI recruiting firm Mercor has confirmed that it was "one of thousands of companies impacted by a supply chain attack involving LiteLLM," an open-source Python library used as a universal interface for large language model APIs.
Mercor on X
Wiz
In a statement published on social media, Mercor stated that its security team had "moved promptly to contain and remediate the incident," adding that it would carry out an investigation supported by "leading third-party forensics experts."
Mercor on X
The attack originated on March 24, when hackers published malicious versions of LiteLLM 1.82.7 and 1.82.8 to PyPI, which were live for 40 minutes before being quarantined and subsequently deleted.
LiteLLM
Wiz
LiteLLM traced the attack to a compromised Trivy security scanner dependency in LiteLLM's CI/CD pipeline. The incident has been attributed to TeamPCP, a hacking group suspected of launching a supply-chain campaign targeting multiple open-source projects to distribute malware.
LiteLLM
TechCrunch
Cyber Security Agency of Singapore
Despite TeamPCP being held responsible, the extortion group Lapsus$ claimed it had obtained approximately 4 TB of Mercor data, including 939 GB of source code, a 211 GB database and 3 TB of bucket data, which it offered to sell to the highest bidder.
Dark Web Informer on X
TechCrunch
The development follows warnings that the TeamPCP attacks could claim more victims, with Mandiant Consulting CTO Charles Carmakal predicting the number of those affected to increase by "another 500, another 1,000, maybe another 10,000" over time.
CyberScoop
The Register

Sources Split

LEFT

CENTER

RIGHT

ESTAB
CRIT

CENTER

PRO
ESTAB

The Spin

Narrative A

LiteLLM's supply chain attack was a contained incident, not a disaster, as the two compromised versions were only live for 40 minutes before being quarantined. With LiteLLM taking swift action to address the root cause of this attack, similar exploits will be more difficult to achieve in the future — protecting users in the long run.

LiteLLM

Narrative B

The LiteLMM breach isn't just a corporate headache — it's a full-blown national security crisis. State-of-the-art AI training data from every major lab is now potentially in China's hands, representing billions in lost value. Framing this as just another supply chain incident badly undersells the catastrophic strategic damage wrought.

Garry Tan on X