{"id":"thehackernews-c2f353f11fca","seq":739506,"kind":"news","title":"Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline","url":"https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html","permalink":"https://vulnpulse.app/items/thehackernews-c2f353f11fca","summary":"LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. \"On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness repository which inadvertently contained the master key to a deployment of","severity":null,"techs":["python","github"],"cves":[],"tags":[],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-24T11:03:33.000Z","fetched_at":"2026-10-24T11:34:52.736Z"}