An unrevoked master key exposed in a public repository allowed attackers to infiltrate the LiteLLM release pipeline, resulting in the malicious v1.107.0 release deployed to PyPI and container registries. How the breach started The problem began on May 27, 2026, when a key configuration was accidentally published to the LiteLLM open source repository. Although the developers quickly caught the error and patched it, they forgot to revoke the key. On October 10, 2026, an unkno...