LiteLLM disclosed that a master key for its Agent Platform was accidentally published to a public GitHub repository in May 2026. Although the commit was quickly removed, the master key was not properly revoked. An attacker later used this unrevoked key in October to access the Agent Platform and extract a GitHub OAuth token with extensive permissions tied to the organization owner’s account.
Using the stolen token, the attacker gained owner-level access to LiteLLM’s repositories and executed a supply chain attack. The attacker modified the release pipeline to push a malicious version 1.107.0 of the LiteLLM Python package to PyPI, Docker Hub, and other platforms. The compromised package contained malware designed to harvest credentials from developer tools and cloud environments and establish a persistent backdoor that could execute arbitrary code. The malicious version was quarantined within hours after a researcher reported the attack.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
