MEDIUMSupply Chain
Global

Exposed LiteLLM Key Enabled PyPI Supply Chain Attack

·Source: Bank Info Security

Updated:

Executive Summary

Unrevoked Credential Exposed in May Enabled Repository Compromise in October An attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyP

Analysis

Unrevoked Credential Exposed in May Enabled Repository Compromise in October An attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyPI package downloaded roughly 50,000 times, exposing developer systems, cloud environments and AI provider secrets.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/exposed-litellm-key-enabled-pypi-supply-chain-attack-image_small-8-a-33211.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Oct 26, 2026.

Related Threats

MEDIUMSupply Chain

GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview

The Hacker News
CRITICALSupply Chain

PHP2Shell will persist in enterprise environments for years

Two critical vulnerabilities were announced last week in PHP , the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t control. NAS devices, firewalls, VPN gateways, pr

CVE-2026-109618CVE-2026-109619
CSO Online
MEDIUMSupply Chain

GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub

The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.

Dark Reading