data-breach
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
Medium
Summary
LiteLLM experienced a supply chain attack due to a leaked master key, allowing an attacker to inject malicious workflows into their codebase. The attacker exploited this access to exfiltrate a significant amount of data, including credentials for services like Linear, Together AI, and various cloud platforms.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data