## Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

- 種別: news
- 関連技術: python, github
- 公開日時: 2026-10-24T11:03:33.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-c2f353f11fca

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness repository which inadvertently contained the master key to a deployment of