Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw stolen AWS keys tested.

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...

LiteLLM’s second 2026 supply chain attack exposed cloud credentials, AI API keys and SSH keys through malicious v1.107.0 ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

The software development landscape in 2024 is experiencing a profound shift, primarily driven by the integration of artificial intelligence (AI). Contrary to fears of job displacement, AI is actually ...

Recently, more and more people are using AI to create apps and tools.If you ask ChatGPT, Claude, or others, you can create ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...

Python 3.15 brings native Arm64 support to Windows on Arm, with 94% package compatibility and new GitHub Actions runners.