The open-source artificial intelligence model gateway LiteLLM allowed a threat actor to gain owner-level access to its entire GitHub repository via an exposed, unrevoked master key that set off a supply chain attack last week. https://www.databreachtoday.com/exposed-litellm-key-enabled-pypi-supply-chain-attack-a-33211
www.databreachtoday.comExposed LiteLLM Key Enabled PyPI Supply Chain AttackAn attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyPI package downloaded