CloudSEK Identifies LiteLLM Exposure Affecting 434,000 Software Pipelines

CloudSEK said in a press release that it identified more than 2,500 organizations that may have been affected by a March 2026 AI supply chain incident involving LiteLLM, with about 434,000 automated software pipelines linked to the exposure. LiteLLM is an open source tool used by organizations to connect applications with artificial intelligence models.

CloudSEK said the potentially affected organizations span technology, finance, telecom, cybersecurity, manufacturing, logistics, consulting, and enterprise software. Its dataset includes matches tied to organizations including NVIDIA, Samsung Electronics, Cisco Systems, Siemens, S&P Global, ServiceNow, Deloitte, Vodafone, X Corp, Zscaler, FedEx, Volkswagen, Thales, and London Stock Exchange Group.

The company said potentially accessible information included cloud credentials, source code access, server keys, software secrets, AI API keys, and other credentials. CloudSEK said appearing in the dataset does not mean an organization was breached or that data was stolen, but that related information was identified in the exposure and should be investigated.