MEDIUMSupply Chain
Global

LiteLLM Compromised in Fresh Supply Chain Attack

·Source: SecurityWeek

Updated:

Executive Summary

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek .

Analysis

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Oct 23, 2026.

Related Threats

MEDIUMSupply Chain

ISMG Editors: Stolen Vendor API Secret Exposes Microsoft 365

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ismg-editors-stolen-vendor-api-secret-exposes-microsoft-365-image_small-8-a-33195.jpg" align=right hspace=4><b>ConnectWise Supply-Chain Hack, Rogue AI Agents and Rising AI Token Costs</b><br>In this week's panel, four ISMG editors discussed the potentially far-reaching supply-chain attack involving ConnectWise, growing concerns ov

Bank Info Security
MEDIUMSupply Chain

China-Aligned Hackers Used Agentic AI to Target ConnectWise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/china-aligned-hackers-used-agentic-ai-to-target-connectwise-image_small-9-a-33184.jpg" align=right hspace=4><b>Microsoft Ties Storm-0940 to Automated Intrusions Across Hundreds of Targets</b><br>Microsoft linked the ConnectWise supply chain compromise to China-aligned Storm-0940, which used the open-source Artex agentic AI framewo

Bank Info Security
MEDIUMSupply Chain

Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.

Dark Reading