Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer(github.com)

701 points by theanonymousone 7 months ago | 281 comments

GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.

I'm Archiving Picocrypt(github.com)

205 points by jaden 1 year ago | 122 comments

Codex logging bug may write TBs to local SSDs(github.com)

454 points by vantareed 4 months ago | 249 comments

GitHub issue on openai/codex reporting that Codex CLI's SQLite feedback logs can write about 640 TB per year, rapidly wearing out SSDs.

Neovim tee.exe binary dependency exhibiting illegitimate / unauthorized behavior(github.com)

80 points by patadune 1 year ago | 9 comments

Magit manuals are available online again(github.com)

117 points by vetronauta 11 months ago | 46 comments

Raivo OTP just deleted all tokens after update and is now asking for money(github.com)

43 points by parody577 2 years ago | 16 comments

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer(github.com)

701 points by theanonymousone 7 months ago | 281 comments

GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

PHP 8.2.35(github.com)

1036 points by tuyuri 5 days ago | 562 comments

GitHub release page for PHP 8.2.35, a security release fixing two critical unauthenticated remote code execution vulnerabilities; PHP 8.2 reaches end of life December 2026.

LLM4Decompile: Decompiling Binary Code with LLM(github.com)

373 points by Davidbrcz 2 years ago | 120 comments

GitHub repository for LLM4Decompile, a project using large language models to decompile binary code, with evaluation scripts and samples.

Tell HN: GitHub refuses to remove cracked copies of my software after a month

462 points by IvanK_net 19 days ago | 249 comments

Tell HN post by Photopea's developer complaining that GitHub rejected his DMCA takedown of repositories hosting ad-stripped copies of his web app.

Llama.cpp 30B runs with only 6GB of RAM now(github.com)

1182 points by msoad 3 years ago | 356 comments

GitHub pull request #613 in llama.cpp by jart, merged, which uses mmap to make loading model weights 10-100x faster and reduce RAM usage.