Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor. Parent comment
Pinning is a good idea.
So far, we believe it came from the github oauth cli tokens which are embedded in claude code tool responses - https://docs.litellm.ai/blog/security-incident-oct-21-2026#g...
It's something we're still investigating. I'll update my thread on this post, as we learn more!
There are no comments on this comment yet.
Pinning is a good idea.
So far, we believe it came from the github oauth cli tokens which are embedded in claude code tool responses - https://docs.litellm.ai/blog/security-incident-oct-21-2026#g...
It's something we're still investigating. I'll update my thread on this post, as we learn more!