LiteLLM Compromised in Fresh Supply Chain Attack
Teaser from the source
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on LiteLLM
Other advisories
- Not ratedosv:CLEANSTART-2026-GC08541Security fix for GHSA-6q48-6c7w-9gw2 applied in: litellm-database 1.104.2-r0
- CriticalCVE-2026-114612LiteLLM: Schwachstelle ermöglicht Privilegieneskalation und Codeausführung
- CriticalCVE-2026-114612BerriAI LiteLLM: unzureichende Rechteverwaltung
- Not ratedosv:CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
- CriticalCVE-2026-114612BerriAI LiteLLM: unzureichende Rechteverwaltung
- Criticalpwn_watch:litellm-1-107-0-pypi-compromiseLiteLLM 1.107.0 PyPI/Docker supply-chain compromise
- MediumCVE-2026-108575LiteLLM: Mehrere Schwachstellen
- MediumCVE-2026-108575BerriAI LiteLLM: fehlerhafte Rechtevergabe
Other news entries
- LiteLLM supply chain attack started with an exposed master keyNewsThe Register — Security
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineNewsThe Hacker News
- LiteLLM: Schwachstelle ermöglicht Privilegieneskalation und CodeausführungVulnerabilityBSI CERT-Bund
- LiteLLM release pipeline hacked to distribute info-stealer malwareNewsBleepingComputer
- ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreNewsThe Hacker News
- LiteLLM release pipeline hacked to distribute credential-stealing malwareNewsCSO Online
- LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package ReleaseNewsThe Hacker News
- LiteLLM supply chain attack hoovers up passwords and secretsNewsThe Register — Security
Source: https://www.securityweek.com/litellm-compromised-in-fresh-supply-chain-attack/
ID