AI Unicorn Mercor Hacked: Open-Source Project LiteLLM Compromised by Malware

Mercor Confirms Supply Chain Attack Targeting Its Open-Source Project LiteLLM, an incident impacting downstream ecosystems involving thousands of enterprises, emerging as a significant recent risk event within AI infrastructure security.
The prominent AI recruitment firm Mercor, valued at $1 billion, disclosed on Tuesday that its core LiteLLM project was compromised by malicious code injection, with the attack attributed to the hacker group TeamPCP. Concurrently, the ransomware group Lapsus$ claimed responsibility for stealing Mercor's internal data, publicly releasing sample information that included Slack communications, ticket system screenshots, and recorded conversations from AI systems. Mercor has engaged third-party forensic experts to lead an investigation and has implemented immediate containment and remediation steps, though it has not yet directly commented on the specifics of Lapsus$'s ransom demands.
The vulnerability is centered on the widely adopted LiteLLM open-source library. The project, which sees millions of daily downloads, is designed to streamline API calls for developers to leading models like OpenAI and Anthropic. While the malicious code was detected and eradicated within hours, its extensive reach as a supply chain component has prompted a thorough industry reassessment of open-source tool compliance.
In response, LiteLLM has urgently transitioned its compliance certification to Vanta. As an industry leader, Mercor secured $350 million in its Series C funding and handles over $2 million in daily payment transactions. This security breach underscores the fragility of the AI sector's foundational security during rapid growth, becoming a critical factor influencing model training and talent acquisition cycles. The industry must urgently establish more robust monitoring frameworks for open-source components.
Related article
Stripe to Acquire OpenRouter as AI Model Routing Gains Momentum
Stripe has agreed to acquire OpenRouter, an AI model-routing platform that gives developers access to hundreds of models through a single interface. The deal adds model selection and routing to Stripe’s existing work around AI usage and token-based b
Former OpenAI Researcher Barrett Zoph Returns to Google to Support Gemini Development
Barret Zoph, who previously abruptly left and joined OpenAI due to a disagreement with Thinking Machines Lab CEO Miriam Mularati, has once again changed employers. Alphabet's Google announced that Zoph will return as Vice President of Research, bring
How Recursive Intelligence Raised $335M at $4B Valuation in 4 Months
The co-founders of startup Ricursive Intelligence seemed destined to be co-founders.Anna Goldie, CEO, and Azalia Mirhoseini, CTO, are so well-known in the AI community that they were among those AI engineers who “got those weird emails from Zuckerber
Related Special Topic Recommendations
Comments (0)
0/500

Mercor Confirms Supply Chain Attack Targeting Its Open-Source Project LiteLLM, an incident impacting downstream ecosystems involving thousands of enterprises, emerging as a significant recent risk event within AI infrastructure security.
The prominent AI recruitment firm Mercor, valued at $1 billion, disclosed on Tuesday that its core LiteLLM project was compromised by malicious code injection, with the attack attributed to the hacker group TeamPCP. Concurrently, the ransomware group Lapsus$ claimed responsibility for stealing Mercor's internal data, publicly releasing sample information that included Slack communications, ticket system screenshots, and recorded conversations from AI systems. Mercor has engaged third-party forensic experts to lead an investigation and has implemented immediate containment and remediation steps, though it has not yet directly commented on the specifics of Lapsus$'s ransom demands.
The vulnerability is centered on the widely adopted
In response, LiteLLM has urgently transitioned its compliance certification to Vanta. As an industry leader, Mercor secured $350 million in its Series C funding and handles over $2 million in daily payment transactions. This security breach underscores the fragility of the AI sector's foundational security during rapid growth, becoming a critical factor influencing model training and talent acquisition cycles. The industry must urgently establish more robust monitoring frameworks for open-source components.
Stripe to Acquire OpenRouter as AI Model Routing Gains Momentum
Stripe has agreed to acquire OpenRouter, an AI model-routing platform that gives developers access to hundreds of models through a single interface. The deal adds model selection and routing to Stripe’s existing work around AI usage and token-based b
Former OpenAI Researcher Barrett Zoph Returns to Google to Support Gemini Development
Barret Zoph, who previously abruptly left and joined OpenAI due to a disagreement with Thinking Machines Lab CEO Miriam Mularati, has once again changed employers. Alphabet's Google announced that Zoph will return as Vice President of Research, bring
How Recursive Intelligence Raised $335M at $4B Valuation in 4 Months
The co-founders of startup Ricursive Intelligence seemed destined to be co-founders.Anna Goldie, CEO, and Azalia Mirhoseini, CTO, are so well-known in the AI community that they were among those AI engineers who “got those weird emails from Zuckerber





Home






