Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
An unrevoked LiteLLM master key enabled GitHub token theft and a malicious PyPI release that steals credentials and installs a backdoor.
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.
GitHub's new AI detector checks code for exposed passwords and credentials, expanding push protection to prevent more secret leaks.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results