A leaked #LiteLLM master key helped attackers steal #GitHub tokens and poison software releases.
The post-mortem of the attack is a fascinating read, particularly if you are using GitHub:
👇
#AppSec #SoftwareSupplyChainSecuritu
https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html
The Hacker NewsLeaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineAn unrevoked LiteLLM master key enabled GitHub token theft and a malicious PyPI release that steals credentials and installs a backdoor.