LiteLLM has disclosed a security breach where a leaked master key on GitHub allowed attackers to hijack its release pipeline and distribute a malicious version of the Python package.
A supply chain attack targeting the TanStack npm package enabled threat actors to steal approximately 170 private GitHub repositories from security firm CrowdSec.
