LiteLLM breach update: attackers deleted the logs
Official report reveals 3 developer accounts were hijacked, branch protection overridden, and workflow logs deleted in a coordinated supply chain attack.
Official report reveals 3 developer accounts were hijacked, branch protection overridden, and workflow logs deleted in a coordinated supply chain attack.
For the second time in 2026, attackers poisoned LiteLLM on PyPI — this time via Git fork injection — stealing AI API keys and cloud credentials from thousands of teams.