Benji Asperheim @basperheim

Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine. The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once. The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine. The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had. That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months. The attack chain is the part that gets worse every sentence. TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials. Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one. The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions. TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.” Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours. The companies deploying AI the fastest right now have the least visibility into what’s underneath it.

Andrej Karpathy @karpathy

5 months ago

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database

1K 5K 28K 66.6M 13K

Here's an example of Google's AI reporting security vulnerabilities in this codec: issuetracker.google.com/issues/4401831… We take security very seriously but at the same time is it really fair that trillion dollar corporations run AI to find security issues on people's hobby code? Then expect volunteers to fix.

FFmpeg @FFmpeg

9 months ago

Patch to fix an issue with decoding LucasArts Smush codec, specifically the first 10-20 frames of Rebel Assault 2, a game from 1995. FFmpeg aims to play every video file ever made.

13 47 1K 378K 75

Our friends at dav1d showing us the value of specific domain knowledge. dav1d was written by people in their basements, libgav1 was written by Google Engineers. When people say we need to be more corporate, more professional, is the bottom line really what you want?

FFmpeg is used in the Tesla Dojo system: x.com/FFmpeg/status/…

FFmpeg @FFmpeg

2 years ago

A brief mention in this article of FFmpeg being used in @Tesla Dojo supercomputer: chipsandcheese.com/2024/08/27/tes…

5 19 224 28K 26

@dztenders Il semble que votre modèle d’e-mail de réinitialisation du mot de passe soit compromis. J’ai reçu un message “Binance 1,3446 BTC” dans un e-mail DZtenders envoyé via Amazon SES). Liens : votre URL de réinit. + externe (défangé) hxxp://hfexde.blogspot[.]al.

@dztenders Your password-reset email template looks compromised. I received a "Binance 1.3446 BTC" message embedded inside a DZtenders reset email sent via Amazon SES (SPF/DKIM/DMARC pass). Links included your reset URL and a defanged external: hxxp://hfexde.blogspot[.]al.

Prompt: ``` Make me a Tetris clone using Python and Pygame ```

I had #ChatGPT5 make a #Tetris clone—pretty impressive so far.

The Fake Job Epidemic Designed To Waste Your Time youtu.be/PtvLhIFCVrs?si… via @YouTube #FakeJobs

Today we're thrilled to announce our effort to port the TypeScript compiler and language service to native code, gaining a 10x speed boost in build times and editor responsiveness! devblogs.microsoft.com/typescript/typ…

babe wake up, astro 5.11 just dropped ✨

Astro @astrodotbuild

a year ago

Astro 5.11 is all about experimenting with new things 🧑‍🔬 - CSP static headers for static pages in Node.js, Netlify and Vercel adapters - Disable HTML streaming in Node.js

7 19 248 16K 25

I launched a markdown-to-HTML online markdown editor site today using #Docker and #Astro editmarkdown.online

our model selector doesn't suck anymore

I recently learned about how freakin' awesome @astrodotbuild (#Astro) is. Would highly recommend for any FE devs who want a break from the #React #Angular framework bloat, and deploy a quick-to-build, SEO-friendly static/hybrid web app. BONUS: You can use @typescript with it!

I created a #Python script to help debug complex code in #Angular components. learnprogramming.us/blog/reverse-e…

[status] Identified: The issue has been identified and a fix is being implemented. stspg.io/pw7dp1kt5frp?u…

@trumpobovic @npmstatus ..except I'm getting "504 Gateway Timeout" errors

@trumpobovic @npmstatus Same here.

@yarnpkg Apparently it's an NPM issue they're working on: x.com/npmstatus/stat…

npm status @npmstatus

a year ago

[status] Investigating: We are currently investigating this issue. stspg.io/pw7dp1kt5frp?u…

42 16 130 15K 5

@yarnpkg I'm getting a 504 timeout error when I attempt to run `yarn outdated` even after doing `yarn config set httpTimeout 600000`

[status] Investigating: We are currently investigating this issue. stspg.io/pw7dp1kt5frp?u…