Request invite
Security · 23 October 2026

LiteLLM Compromised via GitHub CLI OAuth Tokens in Supply Chain Attack

Hackers compromised GitHub CLI OAuth tokens to push malicious packages to PyPI and Docker, affecting LiteLLM.

Why it matters

Evaluate third‑party package dependencies and monitor for compromised credentials.

For product managers

For your product
What does this mean for your product?
Try it on your product
Read at SecurityWeek
More from this issueAll AI news from 23 Oct →
Google Cloud Launches Agent Compute Engine: A MicroVM per AI AgentAnnounced
OpenAI launches Decisions API to compete with TypeSafe's JevAvailable now
Recursive releases Flint, 40B MoE model built by AI system 'Eureka Machine'Available now
OpenAI launches Codex and models on Google Cloud's Model GardenAnnounced

Get this every morning, written for your product.

Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.

Request an inviteSee how it works