CyberSecurity News
LiteLLM Compromised in Fresh Supply Chain Attack
SecurityWeek
· October 23, 2026AI summary
A supply chain attack has compromised LiteLLM, with hackers utilizing stolen GitHub CLI OAuth tokens to distribute malicious packages. The tokens were used to push and approve the packages on PyPI and Docker, highlighting a vulnerability in the software supply chain.
This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.