// GitHubCRITICAL
Attackers compromised LiteLLM's GitHub organization and injected credential-stealing workflows into the BerriAI/litellm repository on October 10 and 12, 2026. The malicious workflows exfiltrated CI/CD secrets including GitHub tokens, API keys for OpenAI, Anthropic, AWS Bedrock, and other services. Eleven days later, on October 21, the attacker used stolen maintainer privileges to bypass branch protections and release seven malicious PyPI packages (litellm==1.107.0) and container images. Initial access stemmed from an Agent Platform master key left publicly committed on May 27 and never revoked.
- Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply(opens in a new tab)
- LiteLLM 1.107.0 Supply Chain Compromise (No CVE): Dual Python St(opens in a new tab)
// Get alerts for GitHub