LiteLLM PyPI compromise and Railway breach: Oct 21 attack timeline and free response kit
alvelda · x · 2026-10-23
Two credential-targeting attacks on AI infrastructure were disclosed on Oct 21, 2026, and Agent Field Kit published a full breakdown with free response tooling.
Timeline (UTC)
- 10:08 LiteLLM reports a privileged developer credential was used to override branch protection on its release workflow
- 10:46–11:11 The modified workflow builds from lookalike repo Berri-AI/litellm; a second credential passes the production approval gate
- 11:39–13:23 Malicious litellm==1.107.0 goes live on PyPI
- 11:46–14:20 Compromised Docker tags (v1.107.0, latest, etc.); GHCR copies pulled by 13:51
- Same day Railway discloses an unauthorized party may have accessed encrypted customer env vars, some decrypted; deployments paused
Free response kit: a 30-minute first-response runbook (pause paying/sending agents, rotate at issuer, revoke delegated OAuth grants, check misuse), a blast-radius-ranked secrets inventory template, incident records, and rotationcheck.py, which flags unrevoked/stale/unowned credentials without touching real secret values. The author argues LLM-enhanced attackers demand agentic defense, and also ships a public MCP server plus 'check my stack' tools for bots.
Related event: Free Agent Cyber Defense bundle released after LiteLLM supply-chain attack(3 posts)→
More from coding & agent
- Recreating a 1990 Sony Clip With moov, a Terminal-Based Video Agent — wavefnx · 2026-10-23
- MLE-World Learns From Past ML Experiment Traces, Gaining 19% on MLE-bench Lite — sherryyangML · 2026-10-23
- You don't need frontier models: open-weight LLMs easily find code vulnerabilities — DanielLockyer · 2026-10-23
- MLE-World: a learned world model predicts ML experiment outcomes, halving compute while raising scores — sherryyangML · 2026-10-23
- SwiftUI voice assistant demo chains Gemini STT, LLM and TTS models in one pipeline — amos_gyamfi · 2026-10-23
- ReviewPal launches: AI code reviewer comments on buggy PR lines within seconds — emeka_boris · 2026-10-23