Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

An unrevoked master key from LiteLLM's Agent Platform, accidentally exposed in a public GitHub repository in May 2026, was exploited by an attacker on October 10, 2026, to gain access to the organization's GitHub CLI OAuth token with owner-level privileges. The attacker used this access to hijack the release pipeline, publish a malicious version of the LiteLLM Python package (1.107.0) to PyPI, and exfiltrate sensitive credentials via malicious GitHub Actions workflows. The compromised package executes automatically at Python startup, enabling credential theft and backdoor execution, even if LiteLLM is not explicitly imported.

AI-extracted · verify before operational use