LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.

A maior parte dos incidentes começa com uma pessoa enganada. Entender o truque ajuda a reconhecê-lo na caixa de entrada.

• Identifique qual era o gancho (urgência, autoridade, prêmio).
• Veja se SPF, DKIM e DMARC barrariam esse e-mail.
• Pratique a leitura de cabeçalhos no lab de phishing.