LiteLLM deploy system hijacked via leaked admin key, malicious 1.107.0 shipped
- —Agent platform master key was exposed in a public GitHub repo on May 27
- —The key was never revoked, letting the attacker reach a GitHub admin account on October 10
- —Tokens of two engineers with access to all org repositories were stolen
- —Malicious version 1.107.0 stayed on PyPI for about an hour before quarantine
Why it matters: The supply-chain compromise via PyPI and Docker Hub puts every production LiteLLM install at risk, and Microsoft warns malicious files may persist outside the app folder after deletion.
Source: Digital Today