LiteLLM Traces Its Poisoned 1.107.0 Release to a Master Key Nobody Revoked
LiteLLM says a master key exposed in a public repository in May, and never revoked, let an attacker take a GitHub owner token and push a credential-stealing 1.107.0 release on Wednesday. Microsoft...