Open-source and software supply-chain risks in AI infrastructure
A LiteLLM supply-chain attack exposed Mercor to class-action lawsuits and a possible 4TB data leak — biometric footage and PII for 40,000 workers.