🚨 LiteLLM reveals the root cause of its supply chain attack.
A master key leaked on GitHub in May was never revoked, allowing attackers to access its Agent Platform, steal a GitHub owner token, and publish a malicious PyPI release in October.
Read: https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html