{
  "Event": {
    "uuid": "1008e738-0101-4716-8109-502e110a9e4e",
    "info": "Four Custodians of AI Provider Keys, Hit in Sixteen Days — Optimus Labs · Civilizations",
    "date": "2026-10-21",
    "threat_level_id": "1",
    "analysis": "2",
    "published": true,
    "Orgc": {
      "name": "Optimus Labs · Civilizations"
    },
    "Tag": [
      {
        "name": "optimus:briefing=\"ai-provider-key-custodians-breached-oct-2026\""
      },
      {
        "name": "optimus:severity=\"critical\""
      },
      {
        "name": "optimus:type=\"credential\""
      },
      {
        "name": "optimus:type=\"inference\""
      },
      {
        "name": "optimus:category=\"AI\""
      },
      {
        "name": "optimus:category=\"CH\""
      },
      {
        "name": "type:OSINT"
      }
    ],
    "Attribute": [
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/ai-provider-key-custodians-breached-oct-2026",
        "comment": "Optimus Labs briefing"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://blog.railway.com/p/security-disclosure-wednesday-october-21st",
        "comment": "Railway security disclosure, Oct 21"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://status.railway.com/incident/QH8L8B3E",
        "comment": "Railway incident status"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
        "comment": "LiteLLM incident report, Oct 21"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://github.com/BerriAI/litellm/issues/47826",
        "comment": "LiteLLM security issue #47826"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html",
        "comment": "The Hacker News: LiteLLM compromised"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548",
        "comment": "The Register: LiteLLM supply chain attack"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://research.jfrog.com/post/litellm-hijacked-again/",
        "comment": "JFrog: LiteLLM hijacked again"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://socket.dev/blog/litellm-compromise",
        "comment": "Socket: LiteLLM compromise"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.wiz.io/blog/litellm-compromised-steals-credentials",
        "comment": "Wiz: LiteLLM compromised, steals credentials"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.endorlabs.com/learn/litellm-1-107-0-compromised-python-startup-hooks-steal-cloud-ai-and-proxy-credentials",
        "comment": "Endor Labs: LiteLLM 1.107.0"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://fireworks.ai/security/bulletins/october-2026-security-incident",
        "comment": "Fireworks October 2026 security incident"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://lava.security/blog/fireworks-ai-security-incident",
        "comment": "LAVA: Fireworks AI incident"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://x.com/opencode/status/2111519637049319818",
        "comment": "OpenCode statement on X, Oct 17"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/opencode-console-breach-provider-key-exposure",
        "comment": "Optimus Labs briefing #13: OpenCode Console"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/salesloft-drift-oauth-supply-chain",
        "comment": "Optimus Labs briefing: Salesloft Drift OAuth supply chain"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/arrayref-rust-crate-build-time-rce",
        "comment": "Optimus Labs briefing: arrayref poisoned Rust crate"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://optimuslabs.io/research/briefings/coder-registry-infrastructure-hijack",
        "comment": "Optimus Labs briefing: Coder registry hijack"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://labs.cloudsecurityalliance.org/research/csa-research-note-teampcp-ai-infra-supply-chain-20260406-csa/",
        "comment": "Cloud Security Alliance: TeamPCP and AI infrastructure"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/",
        "comment": "Ars Technica: terabytes of credentials leaked"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://www.anthropic.com/threat-intelligence-report-september-2026",
        "comment": "Anthropic threat report, Sep 2026"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
        "comment": "OWASP Top 10 for Agentic Applications 2026"
      },
      {
        "type": "link",
        "category": "External analysis",
        "to_ids": false,
        "value": "https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/",
        "comment": "OWASP Top 10 for LLM Applications 2026"
      },
      {
        "type": "sha256",
        "category": "Payload delivery",
        "to_ids": true,
        "value": "1bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339e",
        "comment": "Docker tags on Oct 21: v1.107.0, latest, main-latest, main-stable (digest sha256:1bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339e)"
      },
      {
        "type": "filename",
        "category": "Payload delivery",
        "to_ids": false,
        "value": "cook.py",
        "comment": "Files in site-packages: cook.pth, cook.py, sitecustomize.py"
      },
      {
        "type": "filename",
        "category": "Payload delivery",
        "to_ids": false,
        "value": "sitecustomize.py",
        "comment": "Files in site-packages: cook.pth, cook.py, sitecustomize.py"
      },
      {
        "type": "url",
        "category": "Network activity",
        "to_ids": true,
        "value": "http://www.litellm.dev/healthcheck",
        "comment": "Exfiltration: hxxp://www[.]litellm[.]dev/healthcheck. Dead drop: raw[.]githubusercontent[.]com/letters9813/pythonclient-test/main/domain.txt"
      },
      {
        "type": "domain",
        "category": "Network activity",
        "to_ids": true,
        "value": "raw.githubusercontent.com",
        "comment": "Exfiltration: hxxp://www[.]litellm[.]dev/healthcheck. Dead drop: raw[.]githubusercontent[.]com/letters9813/pythonclient-test/main/domain.txt"
      }
    ]
  }
}