Leaked LiteLLM Master Key Exposed GitHub Tokens and Release Pipeline
RedSide Security October 24, 2026 Cyber Attacks 8 views
A master key accidentally committed to a public LiteLLM repository in May 2026 let an attacker harvest GitHub tokens and publish a malicious version of the popular Python package, highlighting secret sprawl and release pipeline risk.
supply chain attack
open source security
LiteLLM
leaked credentials
GitHub tokens
CI/CD security
secret management
Continue reading: Leaked LiteLLM Master Key Exposed GitHub Tokens an…
