Popular AI tool LiteLLM says unrevoked key allowed hackers to target users

LiteLLM's postmortem traces last week's supply-chain attack to a master key for an internal agent tool, exposed in a public GitHub repository on May 27. The team removed the file but never revoked the key. On October 10 an attacker used it to obtain a GitHub token with owner-level access, then published version 1.107.0 with credential-stealing malware. Wiz counts about 49,000 downloads, and Microsoft says the malware ran at every Python startup. Deleting a leaked secret is not revoking it. Anyone who installed 1.107.0 should rotate every reachable credential.