On: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

[wisty]

Original articles says it was likely a comprimised maintainer machine?

[detente18 → wisty]

From our investigation, the token compromised was included by claude code in the tool call.

This was captured in the request/response logs.

The attacker, having gotten access to the logs, then looked for this and used it.

So - yes a local github cli oauth token, but not the machine.