---
id: 6625
title: "From Shai-Hulud to LiteLLM: Supply Chain Attackers Are Coming for Your Agents"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/supply-chain-attackers-are-coming-for-your-agents/"
published_at: "2026-03-30T13:15:58Z"
tags: ["ai-security", "supply-chain", "mcp", "npm", "jfrog", "llm-security", "ai-agents", "shai-hulud", "litellm", "jfrog-com"]
phying_url: "https://phying.com/item/6625"
lang: en
---

# From Shai-Hulud to LiteLLM: Supply Chain Attackers Are Coming for Your Agents

## Summary

JFrog traces the supply chain playbook from the Shai-Hulud npm worm to the LiteLLM compromise: attackers now target AI agents themselves—LLM, memory, skills and MCP servers are each a vector.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2026-03-30T13:15:58Z
- **Original:** https://jfrog.com/blog/supply-chain-attackers-are-coming-for-your-agents/
- **Phying News:** https://phying.com/item/6625