LiteLLM Exposes GitHub Token Leak Behind Malicious Package Release

A GitHub token leak occurred when Claude Code embedded a user's GitHub CLI OAuth token into a response body, potentially exposing it in LiteLLM logs, according to a recent investigation. The leak led to a compromised release pipeline and a poisoned package, LiteLLM v1.107.0, pushed to multiple registries on October 21, 2026.

A recent investigation revealed that a GitHub token leak was behind a malicious package release, specifically when Claude Code embedded a user's GitHub CLI OAuth token into a response body, potentially exposing it in LiteLLM logs. This led to a compromised release pipeline and a poisoned package, LiteLLM v1.107.0, being pushed to multiple registries on October 21, 2026.