{"id":"thehackernews-89c43e5d413a","seq":189166,"kind":"news","title":"LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release","url":"https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html","permalink":"https://vulnpulse.app/items/thehackernews-89c43e5d413a","summary":"LiteLLM on Wednesday disclosed that threat actors compromised \"multiple independent security controls\" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.","severity":null,"techs":["python","github","docker"],"cves":[],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-22T08:28:48.000Z","fetched_at":"2026-10-22T09:11:50.540Z"}