LiteLLM's postmortems trace 1.107.0 to an admin key deleted from a public repo in May but never revoked. The chain, and the git and gh habits that break it.
Deleting the File Didn't Revoke the Key: How LiteLLM 1.107.0 Shipped Malware
Related
I Built a Free Google Ads Generator with AI (ReadyAd)
Writing Google Ads copy is slow and boring. For every product you need short ad titles, clear...
Cinco borrados reales hechos por agentes de IA este otoño y cómo prevenir cada uno
Este otoño se publicaron varios informes de agentes de programación (Claude Code, opencode y otros)...
How I Built Lazarus: Autonomous Legacy Resurrection with Kiro Specs, Custom MCP, and Differential Fuzzing
Engineering teams sit on unmaintained legacy JavaScript modules they are afraid to touch because...