#GitHub OAuth

LiteLLM's Release Pipeline Was Hijacked for Two Hours and Shipped a Credential Stealer

Attackers used stolen GitHub CLI tokens from three LiteLLM engineers to push version 1.107.0, which quietly ran code every time Python started.