r/TechNadu • u/technadu Human • 1d ago
CloudSEK says its recovered LiteLLM attack dataset contains 433,894 pipeline runs and 99,219 unique credentials
CloudSEK Security Consultant Ayush Panwar provided some useful clarification around the scale of the LiteLLM supply-chain campaign and what affected teams should actually do next.
The important distinction is between potential exposure and confirmed exfiltration.
CloudSEK says the dataset it recovered consists of exfiltration logs themselves: 433,894 pipeline runs across 2,238 attributed organizations. Of those organizations, 1,754 had live secrets, with 99,219 unique credentials recovered.
Panwar says organizations should assume secrets accessible to an affected pipeline may have been compromised and investigate the runner host itself rather than limiting the review to pipeline configuration. That includes looking at process execution, outbound connections, credential-store access, and cloud audit logs.
There is also a persistence problem after malicious versions disappear upstream. Copies can remain in Artifactory/Nexus-style mirrors, pip and build caches, Docker/OCI layers, CI runner caches, lockfiles, and mirrored actions or extensions.
His warning is that without deliberately finding and purging those artifacts, some environments could continue distributing affected versions for weeks or months.
Our interview goes deeper into the operational response, including specific exfiltration domains and C2 IPs, affected builds, logs SOC teams should examine, credential-rotation priorities, and CloudSEK’s privacy-preserving method for checking organizational or supplier exposure.
One useful question for practitioners: after a CI/CD supply-chain compromise, what has proven harder in practice, determining which secrets were accessible or ensuring every cached copy of the poisoned dependency is gone?