The Software Supply Chain Is Now a Lateral Movement Problem
Illumio, Friday, October 30th, 2026
Illumio argues supply chain attacks like the LiteLLM compromise should be treated as lateral movement problems, not only dependency problems.
On October 21, attackers published a malicious release of LiteLLM, a Python library with about 23 million weekly downloads, through its own release pipeline to PyPI and official Docker images; the GitHub source tag looked clean.
LiteLLM's root-cause analysis traces it to an admin key committed to a public repository in May, which opened an internal agent platform holding an organization owner's GitHub token, then CI workflows yielded more tokens.
Illumio cites similar incidents involving TanStack in May and the ChainDrop campaign in August.
It argues that once trusted software is compromised, defenders must limit where it can move next.