News2026-11-09 14:29 UTC

LiteLLM Admin Key Leak Leads to Token Theft and Poisoned Packages

An admin key committed to a public repo was used to obtain an unscoped GitHub CLI token, which enabled theft of maintainer tokens and publishing of malicious wheels for about two hours.

More News

11-09 14:29 UTCAlpine *sshole Vulnerability Allows Password‑less SSH Access
11-09 14:29 UTCDigiCert Data Breach Exposes Business‑Customer Contact Info
11-09 14:29 UTCIris Ohyama Cloud Breach Affects 7.7 Million Customers
11-09 14:32 UTCDow rallies 600 points as oil slides, tech stocks outside of Nvidia gain
11-09 14:40 UTCAnthropic Launches Claude Personal Finance Ahead of Nasdaq Listing

LiteLLM Admin Key Leak Leads to Token Theft and Poisoned Packages · Coin News Pot