Leaked LiteLLM Master Key Leads to Python Package Supply-Chain Attack

An accidentally published configuration file on GitHub exposed a LiteLLM master key. Threat actors exploited these credentials to steal GitHub tokens and push a malicious release of the popular Python package, successfully compromising the upstream build and deployment pipeline.