IntroductionA critical vulnerability has been discovered in Pillow, the most widely used image library in Python. When ...
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...
Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
Prompt injection test lab: build a 12-step Python harness that scores Claude, GPT, Gemini, Mistral and DeepSeek on 14 OWASP ...
Three incidents hit at least nine languages and six Linux distributions in 48 hours. If you’re wondering whether you need to ...
Anthropic sandbox-runtime gives AI agents OS-level sandboxes without containers; Anthropic reports 84% fewer Claude Code ...
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
LiteLLM's release pipeline was compromised on October 21, 2026, and a malicious v1.107.0 was published to PyPI, Docker Hub ...