LiteLLM Discloses Supply Chain Attack: Unrevoked Key Led to Compromised Releases
LiteLLM disclosed findings on its v1.107.0 supply chain attack. Attackers used an unrevoked key from May to compromise GitHub credentials and hijack release pipelines to publish tainted packages. The release has been pulled.
LiteLLM detailed the v1.107.0 supply chain attack, clarifying prior suspicions about log leaks. In May, a config file with an Agent Platform master key was committed publicly; although overwritten, it was not revoked. Attackers used it in October to gain GitHub owner and maintainer tokens, alter CI workflows, and release tainted packages to PyPI and container registries. The version was pulled October 21 as credentials are being revoked.
Key takeaways
- Attackers used an unrevoked master key from May to obtain owner tokens, steal maintainer credentials, and manipulate release pipelines into signing contaminated v1.107.0 packages.
- The compromised version was removed on October 21; LiteLLM reconstructed the attack via audit logs and is revoking all relevant internal and external credentials.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.