LiteLLM Supply Chain Attack: 7 Wheels, 2 Hours [2026]
· Source: shattered.io
In short
The LiteLLM 1.107.0 release was compromised with a malicious payload that stole credentials, available for about two hours on PyPI and slightly longer on container registries. The attack exploited stolen GitHub CLI OAuth tokens to hijack the release pipeline, leading to widespread exposure of sensitive credentials across cloud, AI provider, and developer tools. A similar supply chain compromise occurred two days earlier targeting OVHcloud CLI releases, emphasizing a growing trend of attackers focusing on release pipelines rather than source code.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 44, 2026: Warehouse AI now has live throughput proof: Aeon reports loading doubled at Saitama
Tags: supply chain, credentials, supply-chain attack, release pipeline, security, python