# OAuth Tokens

Published articles for OAuth Tokens.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## LiteLLM Compromised in Fresh Supply Chain Attack

DevFeed: [LiteLLM Compromised in Fresh Supply Chain Attack](<https://devfeed.tech/articles/litellm-compromised-in-fresh-supply-chain-attack-97259.md>)

Original publisher: [Read original article](<https://www.securityweek.com/litellm-compromised-in-fresh-supply-chain-attack/>)

Author: Ionut Arghire

Published: 2026-10-23T08:10:46Z

Content type: news

Language: en

Sources: [SecurityWeek](<https://devfeed.tech/sources/securityweek.md>)

Topics: [litellm attack](<https://devfeed.tech/topics/litellm-attack.md>), [software supply-chain attack](<https://devfeed.tech/topics/software-supply-chain-attack.md>), [malicious packages](<https://devfeed.tech/topics/malicious-packages.md>), [litellm](<https://devfeed.tech/topics/litellm.md>), [PyPI](<https://devfeed.tech/topics/pypi.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [aws](<https://devfeed.tech/tags/aws.md>), [azure](<https://devfeed.tech/tags/azure.md>), [claude](<https://devfeed.tech/tags/claude.md>), [claude-code](<https://devfeed.tech/tags/claude-code.md>), [command-and-control](<https://devfeed.tech/tags/command-and-control.md>), [docker](<https://devfeed.tech/tags/docker.md>), [featured](<https://devfeed.tech/tags/featured.md>), [github](<https://devfeed.tech/tags/github.md>), [github-cli](<https://devfeed.tech/tags/github-cli.md>), [litellm](<https://devfeed.tech/tags/litellm.md>), [malicious](<https://devfeed.tech/tags/malicious.md>), [malicious-packages](<https://devfeed.tech/tags/malicious-packages.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [oauth-tokens](<https://devfeed.tech/tags/oauth-tokens.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-attack](<https://devfeed.tech/tags/supply-chain-attack.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

### AI overview

LiteLLM version 1.107.0 was maliciously published to PyPI and Docker on October 21; the packages were available for about three hours and reportedly downloaded more than 49,000 times. LiteLLM says attackers likely obtained GitHub CLI OAuth tokens from logs after Claude Code could embed them in a response under certain circumstances, though how they accessed the internal deployment remains unclear. They used the credentials to bypass branch protections and publish poisoned artifacts. The malware steals system, browser, developer, cloud, AI tool, SSH and other credentials, then sends encrypted data to litellm[.]dev; its RAT also contacts a command server and can run attacker-supplied Python. LiteLLM says enterprise customers using its private repository were unaffected. Users who installed 1.107.0 are advised to remove it, rotate credentials and scan for malware; 1.106.2 is identified as the latest clean version.

### Source excerpt

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek.

## GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens

DevFeed: [GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens](<https://devfeed.tech/articles/github-cli-opt-in-to-expiring-auto-refreshing-oauth-tokens-93076.md>)

Original publisher: [Read original article](<https://github.blog/changelog/2026-10-21-github-cli-opt-in-to-expiring-auto-refreshing-oauth-tokens>)

Author: Allison

Published: 2026-10-21T16:43:23Z

Content type: release

Language: en

Sources: [GitHub Changelog](<https://devfeed.tech/sources/github-changelog.md>)

Topics: [Secure token management](<https://devfeed.tech/topics/secure-token-management.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [access-tokens](<https://devfeed.tech/tags/access-tokens.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [caching](<https://devfeed.tech/tags/caching.md>), [cli](<https://devfeed.tech/tags/cli.md>), [client-apps](<https://devfeed.tech/tags/client-apps.md>), [config](<https://devfeed.tech/tags/config.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [extensions](<https://devfeed.tech/tags/extensions.md>), [ghes](<https://devfeed.tech/tags/ghes.md>), [git](<https://devfeed.tech/tags/git.md>), [github](<https://devfeed.tech/tags/github.md>), [github-cli](<https://devfeed.tech/tags/github-cli.md>), [github-com](<https://devfeed.tech/tags/github-com.md>), [github-enterprise](<https://devfeed.tech/tags/github-enterprise.md>), [github-enterprise-server](<https://devfeed.tech/tags/github-enterprise-server.md>), [https](<https://devfeed.tech/tags/https.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [oauth-tokens](<https://devfeed.tech/tags/oauth-tokens.md>), [preview](<https://devfeed.tech/tags/preview.md>), [release](<https://devfeed.tech/tags/release.md>), [token](<https://devfeed.tech/tags/token.md>), [tokens](<https://devfeed.tech/tags/tokens.md>)

### AI overview

GitHub CLI v2.103.0 adds an opt-in public preview of expiring OAuth credentials: `gh auth login --expiring` enables them for a sign-in, or `gh config set expiring_credentials enabled` enables them for future sign-ins. `gh` stores a short-lived access token with a rotating refresh token and refreshes it automatically; `gh auth status` shows its expiry. For HTTPS git use, configure `gh` with `gh auth setup-git`; Git 2.46 or newer can avoid caching credentials past their lifetime. Scripts or tools that save a token obtained once may later hold an expired value, so retrieve it fresh with `gh auth token`. Servers that do not issue refreshable credentials fall back to nonexpiring tokens. Availability is stated for github.com and ghe.com, and GHES 3.23 onward; earlier GHES versions use the existing nonexpiring behavior. Opt-in is backward compatible, while workflows requiring long-lived tokens may break.

### Source excerpt

You can now use expiring, automatically refreshing OAuth credentials in GitHub CLI as part of a public preview. When you opt in, gh stores an expiring access token alongside a... The post GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens appeared first on The GitHub Blog.

## Visual Studio Code 1.144 (Insiders)

DevFeed: [Visual Studio Code 1.144 (Insiders)](<https://devfeed.tech/articles/visual-studio-code-1-144-insiders-92447.md>)

Original publisher: [Read original article](<https://code.visualstudio.com/updates/v1_144>)

Author: Visual Studio Code Team

Published: 2026-10-21T09:24:16.920286Z

Content type: release

Language: en

Sources: [Visual Studio Code](<https://devfeed.tech/sources/visual-studio-code-code-editing-redefined.md>)

Topics: [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [agents](<https://devfeed.tech/tags/agents.md>), [experimental](<https://devfeed.tech/tags/experimental.md>), [markdown](<https://devfeed.tech/tags/markdown.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mermaid-diagrams](<https://devfeed.tech/tags/mermaid-diagrams.md>), [models](<https://devfeed.tech/tags/models.md>), [oauth-tokens](<https://devfeed.tech/tags/oauth-tokens.md>), [release](<https://devfeed.tech/tags/release.md>), [release-notes](<https://devfeed.tech/tags/release-notes.md>), [visual-studio-code](<https://devfeed.tech/tags/visual-studio-code.md>)

### AI overview

VS Code 1.144 Insiders adds experimental session setup and model comparison options, richer Mermaid controls, and per-server MCP OAuth credentials. The session composer can clear its selected workspace to start without a project or choose another workspace; experimental model comparisons can be run without opening a folder. In the rich Markdown editor, Mermaid diagrams can be resized, expanded to editor width, or opened in full view. OAuth tokens are kept separate for each MCP server, addressing shared credentials across server configurations. These notes describe an evolving Insiders build.

### Source excerpt

Learn what is new in Visual Studio Code 1.144 (Insiders) Read the full article

## OAuth grants pile up faster than you can review them. Here's how to keep up.

DevFeed: [OAuth grants pile up faster than you can review them. Here's how to keep up.](<https://devfeed.tech/articles/oauth-grants-pile-up-faster-than-you-can-review-them-here-s-how-to-keep-up-77094.md>)

Original publisher: [Read original article](<https://www.bleepingcomputer.com/news/security/oauth-grants-pile-up-faster-than-you-can-review-them-heres-how-to-keep-up/>)

Author: Sponsored by Nudge Security

Published: 2026-10-08T14:00:10Z

Content type: article

Language: en

Sources: [BleepingComputer](<https://devfeed.tech/sources/bleepingcomputer.md>)

Topics: [OAuth](<https://devfeed.tech/topics/oauth.md>), [least privilege](<https://devfeed.tech/topics/least-privilege.md>), [human review](<https://devfeed.tech/topics/human-review.md>), [AI Chat](<https://devfeed.tech/topics/ai-chat.md>)

Tags: [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [article](<https://devfeed.tech/tags/article.md>), [computer-help](<https://devfeed.tech/tags/computer-help.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mac](<https://devfeed.tech/tags/mac.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-removal](<https://devfeed.tech/tags/malware-removal.md>), [nudge-security](<https://devfeed.tech/tags/nudge-security.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [oauth-grants](<https://devfeed.tech/tags/oauth-grants.md>), [oauth-tokens](<https://devfeed.tech/tags/oauth-tokens.md>), [security](<https://devfeed.tech/tags/security.md>), [spyware](<https://devfeed.tech/tags/spyware.md>), [support](<https://devfeed.tech/tags/support.md>), [tech-support](<https://devfeed.tech/tags/tech-support.md>), [technical-support](<https://devfeed.tech/tags/technical-support.md>), [virus](<https://devfeed.tech/tags/virus.md>), [virus-removal](<https://devfeed.tech/tags/virus-removal.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

OAuth grants let third-party apps retain access to corporate data, often beyond an employee's account credentials, making them difficult for security teams to review at scale. Sponsored by Nudge Security, the article describes its discovery, risk scoring, AI-assisted grant analysis, and human-reviewed governance workflow for assessing and revoking risky access.

### Source excerpt

OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard [...]

## Start Copilot cloud agent tasks via the REST API

DevFeed: [Start Copilot cloud agent tasks via the REST API](<https://devfeed.tech/articles/start-copilot-cloud-agent-tasks-via-the-rest-api-71794.md>)

Original publisher: [Read original article](<https://github.blog/changelog/2026-05-13-start-copilot-cloud-agent-tasks-via-the-rest-api>)

Author: Allison

Published: 2026-05-13T18:01:15Z

Content type: release

Language: en

Sources: [GitHub Changelog](<https://devfeed.tech/sources/github-changelog.md>)

Topics: [REST API](<https://devfeed.tech/topics/rest-api.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [internal developer platform automation](<https://devfeed.tech/topics/internal-developer-platform-automation.md>)

Tags: [access-tokens](<https://devfeed.tech/tags/access-tokens.md>), [agent-tasks](<https://devfeed.tech/tags/agent-tasks.md>), [api](<https://devfeed.tech/tags/api.md>), [api-documentation](<https://devfeed.tech/tags/api-documentation.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [changes](<https://devfeed.tech/tags/changes.md>), [cloud-agent](<https://devfeed.tech/tags/cloud-agent.md>), [copilot](<https://devfeed.tech/tags/copilot.md>), [custom](<https://devfeed.tech/tags/custom.md>), [developer-portal](<https://devfeed.tech/tags/developer-portal.md>), [development-environment](<https://devfeed.tech/tags/development-environment.md>), [migrations](<https://devfeed.tech/tags/migrations.md>), [oauth-tokens](<https://devfeed.tech/tags/oauth-tokens.md>), [preview](<https://devfeed.tech/tags/preview.md>), [progress](<https://devfeed.tech/tags/progress.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [release](<https://devfeed.tech/tags/release.md>), [release-notes](<https://devfeed.tech/tags/release-notes.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>)

### AI overview

The Agent tasks REST API, in public preview for Copilot Business and Enterprise users, lets automations start Copilot cloud agent work in a separate development environment. The agent can make and validate code changes, open a pull request, and expose task progress through the API. Examples include coordinating refactors across repositories, provisioning repositories from an internal portal, and preparing weekly releases with notes. Authentication supports classic and fine-grained personal access tokens and OAuth tokens; GitHub App installation tokens and access for Copilot Pro and Pro+ users are described as coming soon.

### Source excerpt

Copilot Business and Copilot Enterprise users can programmatically start Copilot cloud agent tasks with the new Agent tasks REST API, available in public preview. Copilot cloud agent works in the...