Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor. Parent comment
This was captured in the request/response logs.
The attacker, having gotten access to the logs, then looked for this and used it.
So - yes a local github cli oauth token, but not the machine.
There are no comments on this comment yet.
This was captured in the request/response logs.
The attacker, having gotten access to the logs, then looked for this and used it.
So - yes a local github cli oauth token, but not the machine.