# Unrevoked GitHub key enabled LiteLLM breach and malicious package release

- URL: https://talkfuse.com/story/litellm-supply-chain-attack-started-with-an-exposed-master-key/
- Published: 2026-10-26T20:30:53+00:00
- Updated: 2026-10-26T22:18:28+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544
- Topics: AI, Art, Celebrity, Culture, Entertainment, Technology

## Key points

- An unrevoked master key enabled the attack.
- Malicious version 1.107.0 had about 49,000 downloads.
- Users should investigate systems and rotate exposed credentials.

## Summary

LiteLLM traced last week’s supply chain attack to a master key accidentally committed to a public GitHub repository in May. Although developers removed the exposed commit, they did not revoke the key; an attacker later used it to gain broad access to company repositories and publish a malicious version of the AI gateway.

The poisoned LiteLLM 1.107.0 package was available for less than two hours but received about 49,000 downloads, according to Wiz. It contained an infostealer and a remote access trojan that could steal browser data, cloud credentials and AI provider API keys. LiteLLM is revoking internal and vendor tokens, and advises anyone who ran the affected version to investigate systems and rotate accessible credentials.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.