Mercor’s LiteLLM-linked attack shows AI startups inherit open-source risk

AI startups move fast because they build on open-source tools. That speed also brings risk.

What happened

Mercor said it was hit by a cyberattack tied to compromise of the open-source LiteLLM project.

Why it matters

Many AI companies depend on shared libraries and infrastructure. If those components are compromised, the risk can spread quickly across products and customers.

The bigger picture

Open-source security is becoming part of AI infrastructure. Startups need to treat their dependency chain as seriously as their own code.