Poetry vs uv compared: speed benchmarks, lockfiles, cache commands and why uv sync --locked matters in CI, plus a ...

Stolen tokens and unrotated credentials drove a wave of supply chain attacks. Use these steps to protect your pipeline and your customers.

Learn seven design patterns for data science code, from Strategy and Adapter to Command and Proxy, each matched to the ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw stolen AWS keys tested.

LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and Docker. The incident occurred on October 21 and involved v ...

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.

If you are using LiteLLM, please check your version firstOn October 21, 2026, a major security incident was announced ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.