SecurityThe Hacker Newsabout 2 hours ago
Leaked Key Lets Attackers Hijack LiteLLM Releases
6 min read
On October 21, 2026, attackers used a leaked master key from May 27, 2026, to hijack the LiteLLM release pipeline and publish version 1.107.0. The malicious package contains a backdoor that executes every hour and steals credentials from tools like Linear, OpenAI, and AWS Bedrock.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
