LiteLLM 1.107.0: a real signature on a backdoored release
Attackers used stolen GitHub CLI tokens to push a backdoored LiteLLM through its signed release pipeline. Here is the exposure check, the rotation list and the gateway fixes.
Tagged
Tagged
Attackers used stolen GitHub CLI tokens to push a backdoored LiteLLM through its signed release pipeline. Here is the exposure check, the rotation list and the gateway fixes.