LiteLLM says an unrevoked Agent Platform key enabled an attacker to obtain an organization-level GitHub token and publish malicious LiteLLM 1.107.0. Socket and Microsoft describe secret-stealing workflows and Python-startup malware; LiteLLM is revoking credentials. Share Leaked LiteLLM Key Enabled GitHub Token Theft and Malicious Package Release LiteLLM says an unrevoked Agent Platform key enabled an attacker to obtain an organization-level GitHub token and publish malicious LiteLLM 1.107.0. Socket… @hendryadrian.bsky.social 2026-10-24T12:48:10.253000+00:00 at://did:plc:u6celkmubfsmbus5m3aqcrla/app.bsky.feed.post/3mymq36i4dc2b
Leaked LiteLLM Key Enabled GitHub Token Theft and Malicious Package Release
