Thu, Oct 22 Breaches and campaigns
Attacker used LiteLLM’s release pipeline to ship a credential stealer
LiteLLM believes the attacker took developers’ GitHub CLI tokens from an internet-exposed internal deployment’s logs, and 1.107.0 was on PyPI for about 2 hours.