On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that ...

RunSybil demonstrated code execution through a malicious model template. Python says the sandbox escapes fall outside its ...

NVIDIA opened 1 independent board investigation into Huang. What is confirmed, what is not, and how developers should audit ...

Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including ...

AssemblyAI published a Python tutorial for a real-time voice agent that combines streaming speech recognition, LLM Gateway ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

NVIDIA outlined how KvikIO and cuFile route Python reads into GPU memory and how to verify whether GPUDirect Storage used nvfs or posix.

CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

LiteLLM says an unrevoked master key exposed on GitHub let an attacker poison version 1.107.0, downloaded an estimated 49,000 times.