LiteLLM supply chain attack started with an exposed master key
· Source: theregister.com
In short
LiteLLM traced a supply chain attack to a master key accidentally committed to a public GitHub repository in May and never revoked. Attackers used it to obtain a GitHub CLI OAuth token with owner-level access, then planted a trojanized version (1.107.0) of the AI gateway on PyPI that was downloaded about 49,000 times in under two hours. The infostealer harvested cloud credentials, browser data, and API keys for OpenAI, Anthropic, Cohere and other LLM providers.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 44, 2026: Warehouse AI now has live throughput proof: Aeon reports loading doubled at Saitama
Tags: supply chain, cybersecurity, open source, LLM gateway, infostealer, GitHub