LiteLLM supply chain attack started with an exposed master key
MentionsGitHub
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned version (1.107.0) of the popular open source AI gateway to PyPI and its container registries last Wednesday.
Summary from The Register Security.
Explained
The technology and terms in this story. Learn more
