69.48.229[.]143IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported today
What the reports say
1 report, newest first · the exact sentence from each-
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline“LiteLLM said the unknown attacker (operating from "69.48.229[.]143") used this unrevoked key on October 10, 2026, to gain access to the Agent Platform and extracted a GitHub CLI OAuth token the service was configured with to allow self-hosted cloud agents to file pull requests to G…”
Indicators reported together
named in the same reports- litellm[.]devin 1 report
Copy this indicator · defanged
Thanks — we review every report.