LiteLLM supply chain attack traced to exposed master key

LiteLLM traced last week's supply chain attack to a master key accidentally committed to a public GitHub repository in May. The poisoned version 1.107.0 was downloaded about 49,000 times from PyPI in under two hours before being quarantined.

• Malicious version 1.107.0 spent under two hours on PyPI and got ~49,000 downloads
• The master key was committed to a public repo on May 27 and never revoked
• The attacker gained owner-level access to all LiteLLM GitHub repositories
• Stolen data included AWS, GCP and Azure credentials plus OpenAI, Anthropic and Cohere API keys