· 4 min read
agentic-ai
Four Hours: How LiteLLM's Supply Chain Got Hit, and Where the Tokens Leaked
LiteLLM's own incident report traces a supply-chain compromise back to three stolen GitHub OAuth tokens, one of which leaked because Claude Code embedded it in a logged response body. The timeline, the blast radius, and what to check if you pulled v1.107.0.
Read more