Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack

Hackers accessed LiteLLM’s GitHub organization and executed credential-stealing workflows eleven days before the October 21 supply chain attack that distributed malicious litellm==1.107.0 packages. The findings establish a longer compromise window preceding the poisoned releases. Socket recovered malicious workflows executed inside BerriAI/litellm on October 10 and October 12, 2026. Both used the maintenance-style commit message ci: […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform