Stolen GitHub tokens enabled LiteLLM’s poisoned release
LiteLLM’s October 23 investigation traces the malicious 1.107.0 release to an agent-platform master key exposed on May 27 but left unrevoked. The Hacker News reports that Socket independently recovered credential-stealing workflows; LiteLLM says stolen maintainer identities let the attacker trigger and approve the October 21 release.
ThereforeThe malicious package could steal developers’ credentials when Python started, even without importing LiteLLM, according to Microsoft’s analysis quoted by The Hacker News.