News
vulnerability 2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions - CERT-EU Security Advisories cybersecurity Hackers Built AI-Powered Attack System Using Claude and Grok to Target Banks - CyberPress cybersecurity PHP2Shell Exploitation Started Days Before Patches - SecurityWeek cybersecurity Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect, Exposing 70,000+ Credentials - CyberPress cybersecurity ScarlettGroup Cyber Extortion Gang Uses Tor Leak Site and Disclosure Deadlines to Pressure Victims - CyberPress cybersecurity Fortinet Patches Critical Vulnerabilities in FortiOS, FortiManager, and FortiAnalyzer - CyberPress threat-intel Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking - GBHackers cybersecurity Smart TVs Expose 57 Million Viewing Records, Continue Tracking Users After Opt-Out - CyberPress threat-intel Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code - GBHackers ai AI’s hidden storage bill: What inference leaves behind - MIT Technology Review cybersecurity Hackers Abuse Over 25 Trusted Online Platforms to Spread Phishing Scams, Cisco Warns - CyberPress cybersecurity AI-Assisted Hackers Target Government Linux Servers to Steal Passwords and Sensitive Data - CyberPress cybersecurity LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release - The Hacker News cybersecurity Authorities disrupt nearly 11,000 cybercrime networks in Africa - BleepingComputer cybersecurity Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code - CyberPress
1 / 15
All news ›
Cybersecurity

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

The Hacker News ·

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.