LiteLLM's October compromise shows how a signed release can carry malware
LiteLLM's corrected investigation traces a public administrative key through privileged developer identities to poisoned release artifacts. The important checks sit on both sides of the signature.