Popular AI tool LiteLLM says unrevoked key allowed hackers to target users

LiteLLM, a widely used open-source tool among artificial intelligence developers, has reported that an accidentally exposed key led to a supply-chain attack. The key was exposed in May and the attack is thought to have affected tens of thousands of users. The incident occurred last week, according to LiteLLM. The exposed key was not revoked, allowing hackers to target users of the tool. The attack highlights a vulnerability in the tool's security. LiteLLM's user base was impacted as a result of the supply-chain attack.