United StatesWiz counted about 49,000 downloads of a credential-stealing LiteLLM release.
LiteLLM removed an exposed configuration file in May but never revoked the master key inside it.
The key let an attacker grab a GitHub token for every LiteLLM repository, and the poisoned package sat on the Python Package Index for about 2 hours.
No affected organization has publicly confirmed a breach linked to the release.
LiteLLM told anyone who installed version 1.107.0 to assume theft and rotate every key the machine could reach.
How each outlet framed it
- The Record leans critical
- traces the attack to an unrevoked master key exposed in May, noting Wiz found credentials tested within hours
Sources: The Record