LiteLLM investigation traces GitHub intrusion to October 10
Attackers infiltrated LiteLLM’s GitHub organisation eleven days before distributing malware through its software releases, with newly recovered records showing credential-stealing workflows operating on October 10 and 12. Security company Socket identified two malicious workflow commits in the BerriAI/litellm repository, while LiteLLM’s investigation confirmed that stolen credentials from the…
We haven't written up this one. Arabian Post has the full story — the link below goes straight to it.