AI Gateway Logs Reportedly Exposed GitHub Token in Supply-Chain Compromise

A report links credential logging after Claude Code handled responses in LiteLLM’s gateway to OAuth-token exposure, an altered release workflow, a poisoned package, and subsequent credential validation. An official LiteLLM report and security analyses are cited, but the primary-source timeline and which links are confirmed versus inferred need verification.