LiteLLM Traces October Supply Chain Attack to Unrevoked Master Key Exposed in May

LiteLLM, a widely-used Python proxy for language models, has disclosed the root cause of its October supply chain attack: a master key exposed in a public GitHub repository in May that was never revoked. On October 21, a compromised version 1.107.0 containing credential-stealing malware was published to PyPI and Docker Hub, remaining active for approximately two hours before removal.