Tag: master key exposure
1 article
Exposed Master Key Sparks LiteLLM Supply Chain Attack
A single misstep on May 27 - committing a master key to a public repository - ultimately led to a supply chain compromise on October 10, allowing a threat actor to extract a sensitive GitHub CLI OAuth token. The lapse occurred when the exposed key wasn't revoked quickly enough, leaving the door open to malicious access.