Threat actors are exploiting exposed LLM API endpoints integrated into enterprise systems such as Git repositories and CRMs, repurposing them as offensive infrastructure for malicious activities. This shift highlights the urgent need for organizations to secure