Enterprise
LiteLLM supply chain attack started with an exposed master key
LiteLLM open-source AI gateway was compromised in a supply chain attack traced to an exposed master key accidentally committed to GitHub in May.
Topic
#Litellm
Stories tagged by our AI curator.
Enterprise
LiteLLM says hackers poisoned it with GitHub tokens leaked via Claude Code
LiteLLM disclosed that hackers obtained GitHub tokens via a Claude Code vulnerability and used them to publish a poisoned version of its open-source software.
Enterprise
LiteLLM supply chain attack hoovers up passwords and secrets
LiteLLM's release process was compromised and a malicious version distributed via PyPI and Docker, containing malware to steal cloud credentials and a remote access trojan.