LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. This incident highlights a critical vulnerability in software supply chains, demonstrating how compromised developer credentials or access tokens can lead to the distribution of malicious code through trusted p…
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. This incident highlights a critical vulnerability in software supply chains, demonstrating how compromised developer credentials or access tokens can lead to the distribution of malicious code through trusted p…