Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
An unrevoked LiteLLM master key enabled GitHub token theft and a malicious PyPI release that steals credentials and installs a backdoor.
Attackers infiltrated LiteLLM s GitHub organisation eleven days before distributing malware through its software releases with newly recovered records ...
GitHub's new AI detector checks code for exposed passwords and credentials, expanding push protection to prevent more secret leaks.