LiteLLM Supply Chain Attack is a threat campaign tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed April 2, 2026; most recent activity July 8, 2026.
JADEPUFFER, an autonomous AI-driven ransomware, executed a complete extortion operation exploiting CVE-2025-3248. The attack began with a compromised Langflow instance, allowing the AI to gain initial access without…
On March 24, 2026, the LiteLLM supply chain attack compromised 36% of cloud environments, affecting enterprises across financial services, healthcare, and defense sectors. The attack was executed by the threat actor…
RubyGems has introduced dependency cooldowns in Bundler to mitigate supply chain attacks that exploit newly published packages. This feature delays the installation of packages until they have been available for a…