logo

Deleting a leaked key from your repo doesn't protect you

ID: 24f40aed-ff71-52af-adc9-afb429c5b25d

STIX ID: report--24f40aed-ff71-52af-adc9-afb429c5b25d

Feed Name: Aikido Security's Blog

Threat Score
55/100

Date Published: 2026-11-05

Date Updated: 2026-11-05

...
...

A LiteLLM administrative key was accidentally committed to a public GitHub repo and, despite an attempted deletion and later git-history rewrite, remained discoverable and was used months later to compromise infrastructure; the report demonstrates that deleting files, rewriting history, or deleting repositories does not prevent leaked secrets from being accessible and emphasizes immediate credential rotation and use of secret-detection tools such as Betterleaks and Aikido.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.