Railway, OpenCode and LiteLLM Hit in String of Supply-Chain Attacks Targeting AI API Keys
A wave of supply-chain attacks hit LiteLLM, OpenCode and Railway within a week, all targeting AI API keys, with attackers briefly planting credential-stealing code and accessing legacy systems.
2026-10-22 ~ 2026-10-23 · 2 related posts
- Episode 1: LiteLLM 1.107.0 Poisoned in Supply-Chain Attack, Second Hijack This Year(2026-10-21, 19 posts)
- Episode 2: Railway, OpenCode and LiteLLM Hit in String of Supply-Chain Attacks Targeting AI API Keys(2026-10-22, 2 posts)
- Episode 3: Free Agent Cyber Defense bundle released after LiteLLM supply-chain attack(2026-10-23, 3 posts)
- Episode 4: Security Checklist Flags Critical Vulnerabilities in Local AI Stacks(2026-10-23, 2 posts)
- OpenCode and LiteLLM breached in one week, both attacks hunted AI API keys — victorialslocum · 2026-10-22
- Railway and OpenCode breached as attackers hunt for your AI API keys — thursdai_pod · 2026-10-23