Popular AI tool LiteLLM says unrevoked key allowed hackers to target users

An API key accidentally exposed in May was never revoked, giving an attacker persistent, privileged access to LiteLLM's GitHub repositories months later. This single oversight allowed the adversary to poison a widely-used open-source package on PyPI, resulting in approximately 49,000 downloads of credential-harvesting malware. The stolen cloud credentials were immediately weaponized to access AWS AI services — a pattern known as LLMjacking — amplifying the damage far beyond the initial compromise. This incident illustrates that a leaked secret left unrevoked is functionally equivalent to handing an attacker a permanent key to your infrastructure.