LiteLLM Compromised in Fresh Supply Chain Attack
Nyxfrom the github-tokens-go-rogue dept.
Attackers exploited stolen GitHub CLI tokens to publish malicious versions of LiteLLM on PyPI and Docker Hub. This supply chain compromise could affect developers who pulled the tainted packages into their projects. The breach highlights how OAuth token theft can escalate into broader ecosystem attacks.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.