Credential Exposure

Credential exposure refers to the unauthorized disclosure or compromise of authentication credentials such as API keys, passwords, tokens, or certificates that grant access to AI systems and data. In AI governance contexts, this represents a critical security risk because exposed credentials can enable attackers to manipulate models, access sensitive training data, or inject malicious inputs without detection. Organizations must implement controls like secret management systems, regular credential rotation, and monitoring to prevent exposure incidents that could undermine model integrity and violate compliance requirements.

1 item

ResearchGlobal2026-08-12

LiteLLM Supply Chain Attack Hit 2,500 Orgs Through Malicious PyPI Packages

Researchers at CloudSEK confirmed that two malicious versions of LiteLLM, a widely used AI proxy library, were published to PyPI and exfiltrated AI provider keys, cloud credentials, SSH keys, and runtime secrets from over 2,500 organizations. The attack cascaded from a prior compromise of Aqua Security's Trivy scanner and exposed approximately 434,000 CI/CD pipelines during a 40-minute window. CloudSEK concludes that AI infrastructure has become a high-value attack target, and that open-source AI dependency management is a critical unaddressed gap in most enterprise supply chain security programs.

supply chain security LiteLLM PyPI credential exposure AI infrastructure risk third-party dependencies CI/CD security CloudSEK