LiteLLM Blog · Oct 25, 2026 · 1:16 AM

LiteLLM's poisoned 1.107.0 traced to an unrevoked agent-platform key holding an owner's GitHub CLI token

In an Oct 23 post-mortem, LiteLLM says a master key for its self-hosted cloud-agent platform leaked in a public repo on May 27 and was never revoked; on Oct 10 an attacker used it to pull the org owner's unscoped GitHub CLI token the agents used to open PRs, then stole two maintainers' tokens from CI secrets and ran the release pipeline against a lookalike Berri-AI/litellm fork. If your agents file PRs, give them a scoped service-account token rather than a person's gh login (Microsoft analysis).

Read at docs.litellm.ai

LiteLLM

Call 100+ LLMs with one OpenAI-compatible API

More news

View all

Kiro CLI 2.34 lets MCP tools pause mid-call to ask you for missing input

Released Oct 23, MCP elicitation in local V3 sessions lets a tool show a form or link when it needs details, then carry on with the same call once you answer or decline, instead of failing and restarting. The release also lets you delete memories from /memories , adds more Workflow controls and a model picker editor, and improves headless MCP sign in…

Kiro Changelog 17 minutes ago

AWS open-sources Infinity, a Rust agent runtime that fits 75,000 waiting agents on a Raspberry Pi

AWS and UC Berkeley's Hydro project released Infinity (Apache 2.0), which saves an agent's conversation and suspends it during each tool call, so idle agents cost about nothing and can run on serverless like Lambda. It's an early research release; existing MCP servers work through a compatibility layer…

AWS Open Source Blog 2 hours ago

goose 1.56.0 lets you resume failed subagents and cap how many run at once

Released Oct 23, goose can now resume delegate subagents that failed or were cancelled, links each subagent's view only session in the desktop UI, and limits parallel subagents with GOOSE MAX CONCURRENT SUBAGENTS . It also adds automatic thinking levels, a Windows NSIS installer, and swaps code mode's runtime for the Boa JavaScript engine…

GitHub (aaif-goose/goose) 3 hours ago

Cursor's agents can now control desktop apps on your computer, like the iOS Simulator

Announced Oct 23, Computer Use lets Cursor agents click and type across any app on your machine, not just the browser, so an agent can run and tap through a feature it just built; it kicks in on its own when a task needs it, or you can @ mention Computer Use. Update Cursor to try it; there's no changelog or docs yet on platforms, plans, or per app permissions (TruViber)…

Cursor (X) 4 hours ago

OctoEverywhere launches a free remote MCP server that lets AI agents monitor and control your 3D printers

Released Oct 24 with version 5.4.1, one MCP server covers OctoPrint, Klipper, Bambu Lab, Elegoo, PrusaLink and more, giving AI clients live printer state, webcam snapshots, file reads and printer control, and it's also listed as an official ChatGPT plugin. Write access and direct printer API calls stay off until you grant them in server side controls the AI can't touch, and those grants are time limited (setup guides)…

GitHub (QuinnDamerell/OctoPrint-OctoEverywhere) 5 hours ago

Spotted something we missed? Start a thread.