Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw ...

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

Microsoft demonstrates how to validate database-backed AI applications locally and in CI using the Cosmos DB Emulator.

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...

Python 3.15 brings native Arm64 support to Windows on Arm, with 94% package compatibility and new GitHub Actions runners.