Socket on Mythryl: “🚨 New investigation: Socket found malicious LiteLLM workflows…”

🚨 New investigation: Socket found malicious LiteLLM workflows running 11 days before the attack, targeting 20 secrets including GitHub, cloud, and AI credentials. After our disclosure, LiteLLM linked a stolen token to approval of the malicious release. socket.dev/blog/litellm...

socket.devNew Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain AttackSocket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.

23/10/26, 9:40 pm2 reposts10 likes

Post