Incident

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

Why it matters: LiteLLM says attackers compromised its release pipeline to publish a malicious 1.107.0 package with a credential stealer and backdoor, so users should check for that version and rotate exposed credentials.

Covered by 1 outlet

  • The Hacker News - LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release ()

Published

Start with real signal

See your security surface before you subscribe.

Run the complete AYAsec workflow on Free, then move to the cadence your team needs.

Start scanning free