thehackernews.com
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM revealed that threat actors breached its release pipeline on October 21, 2026, pushing a malicious 1.107.0 version to Docker Hub and PyPI. The poisoned package contained a credential‑stealing backdoor that exfiltrated secrets to a remote server and fetched additional payloads from a GitHub‑hosted domain file. Users who installed the unpinned version between 11:39 a.m. and 1:23 p.m. UTC were affected. The incident exposed a compromised GitHub CLI token and an exposed internal deployment, enabling the attackers to hijack the [...]