LiteLLM supply chain attack started with an exposed master key
Source ↗
👁 0
💬 0
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May.The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned version (1.107.0) of the popular open source AI gateway to PyPI and its container registries last Wednesday. This compromised version contained an infostealer and a remote access trojan capable of executing arbitrary code on infected machines. While the trojanized packag
Comments (0)