llmjacking

LiteLLM 1.107.0 Backdoored via Stolen GitHub Tokens

Attackers used stolen GitHub CLI tokens to push a backdoored LiteLLM 1.107.0 to PyPI and Docker — the AI gateway's second supply chain breach in a year.