6 transmissions tagged #python
A malicious version of LiteLLM sat on PyPI for days, stealing credentials from thousands of AI shops. The attack itself is boring. The failure modes that enabled it are not.
LiteLLM 1.82.8 shipped with a credential-stealing .pth file that fires the moment Python starts. No import needed. Your secrets are already gone.
The 'AI will replace developers' company just acqui-hired a team that builds tools for developers. Make it make sense.
An AI-assisted rewrite just tried to strip the LGPL off one of Python's most downloaded packages. It's either brilliant or deeply wrong — probably both.
Some errors scream, some whisper, and the best ones hand you the map out of darkness.
Four real errors enter the spotlight, and only one dares to tell you what actually went wrong.