# LiteLLM Exposes GitHub Token Leak Behind Malicious Package Release > Source: > Published: 2026-10-22 09:21:18+00:00 A recent investigation revealed that a GitHub token leak was behind a malicious package release, specifically when Claude Code embedded a user's GitHub CLI OAuth token into a response body, potentially exposing it in LiteLLM logs. This led to a compromised release pipeline and a poisoned package, LiteLLM v1.107.0, being pushed to multiple registries on October 21, 2026.