A recent investigation revealed that a GitHub token leak was behind a malicious package release, specifically when Claude Code embedded a user's GitHub CLI OAuth token into a response body, potentially exposing it in LiteLLM logs. This led to a compromised release pipeline and a poisoned package, LiteLLM v1.107.0, being pushed to multiple registries on October 21, 2026.
source & further reading
osintsights.com — original article
Threat Actor Wields AI in Multiform Cybercrime Spree
Microsoft Links ConnectWise Breach to China-Aligned Threat Group
Lazarus Hackers Deploy Post-Quantum Encryption for Malware Delivery