Open-source and software supply-chain risks in AI infrastructure
A supply-chain attack on LiteLLM during a 40-minute window in late March exposed Mercor to class-action lawsuits, a business freeze, and the potential leak of 4TB of contractor data including biometric footage and PII for 40,000 workers.
