The LiteLLM supply-chain attack exposed more than 2,500 companies and roughly 434,000 CI/CD pipelines after TeamPCP used a single un-revoked token to poison releases through the Trivy scanner and LiteLLM build system.
The malicious packages were available for only about 40
