SecurityThe Next Webabout 2 hours ago
Hackers Poison LiteLLM with Stolen Tokens
3 min read
Hackers poisoned the LiteLLM open-source AI gateway by stealing three GitHub tokens leaked via Claude Code. The malicious version 1.107.0 sat on PyPI from 11:39 to 13:23 UTC on 21 October. The package carried a credential stealer and a backdoor that checked a GitHub repository every hour. This is LiteLLM's second compromise in 2026, following a March breach involving Trivy.
Level
Hype check
Tap to vote and see what everyone thinks.
