Skip to main content
Back to feed
CyberReportedHighDevelopingFeatured
7.2

LiteLLM hit by supply chain attack via compromised GitHub OAuth tokens

Attackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker, compromising the LiteLLM project. The incident underscores the growing risk of software supply chain attacks targeting AI infrastructure. The full scope of affected users and packages is still being assessed.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works

SecurityWeekabout 7 hours agoengCredibility 29%View source

Score Breakdown

Mosaic Score7.2
Model confidence0.7
Significance0.8
Source credibility0.3

Intelligence Tags

#supply-chain#github#pypi#docker#ai#open-source

Entities

Supply Chainconcept
Source

Part of a situation

developingCyber6h ago

LiteLLM Supply Chain Attack via Compromised GitHub OAuth Tokens

The LiteLLM project's release pipeline was compromised via attackers utilizing compromised GitHub CLI OAuth tokens. This enabled the publication of malicious PyPI packages and Docker images designed to exfiltrate credentials, secrets, and environment variables. The full scope of affected users and the duration of the intrusion remain under assessment.

→ stable·↑2 signalsScore 5.0

Related signals

8 found