Mercor Recruiting Compromised via Malicious LiteLLM Supply‑Chain Injection
Mercor, an AI‑driven recruiting platform, was breached when a compromised version of the open‑source LiteLLM library was introduced into its software build process. The malicious code embedded in the library activated during compilation, creating hidden back‑doors that allowed threat actors to siphon user credentials, internal configuration files,
