Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
pypi
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Leaked LiteLLM Master Key Exploited to Compromise GitHub, Release Malicious PyPI and Container Packages
Roman Dubrovin
Roman Dubrovin
Roman Dubrovin
Follow
Oct 25
Leaked LiteLLM Master Key Exploited to Compromise GitHub, Release Malicious PyPI and Container Packages
#
security
#
breach
#
github
#
pypi
Comments
Add Comment
9 min read
Develop and Publish Python Packages to PyPI
viraj-sh
viraj-sh
viraj-sh
Follow
Oct 24
Develop and Publish Python Packages to PyPI
#
python
#
pypi
Comments
Add Comment
3 min read
Hacker breached LiteLLM and uploaded malicious software update
Hacks.gr
Hacks.gr
Hacks.gr
Follow
Oct 24
Hacker breached LiteLLM and uploaded malicious software update
#
litellm
#
supplychain
#
python
#
pypi
Comments
Add Comment
2 min read
Malicious LiteLLM v1.107.0 on PyPI/Docker Hub Executes Arbitrary Code on Python Start: Mitigation Steps Available
Roman Dubrovin
Roman Dubrovin
Roman Dubrovin
Follow
Oct 24
Malicious LiteLLM v1.107.0 on PyPI/Docker Hub Executes Arbitrary Code on Python Start: Mitigation Steps Available
#
security
#
malware
#
python
#
pypi
Comments
Add Comment
6 min read
New Python packages picked hatchling, not uv_build
Iain
Iain
Iain
Follow
Oct 23
New Python packages picked hatchling, not uv_build
#
ai
#
python
#
pypi
#
uv
Comments
Add Comment
5 min read
The .pth file that runs before your code: lessons from the LiteLLM 1.107.0 compromise
yutianle
yutianle
yutianle
Follow
Oct 23
The .pth file that runs before your code: lessons from the LiteLLM 1.107.0 compromise
#
supplychain
#
litellm
#
pypi
#
pthfile
Comments
Add Comment
5 min read
5 checks before you publish to PyPI: a pre-release guide for Python packages
Garrin Costa, Jr.
Garrin Costa, Jr.
Garrin Costa, Jr.
Follow
Oct 22
5 checks before you publish to PyPI: a pre-release guide for Python packages
#
python
#
pypi
#
opensource
#
devops
Comments
Add Comment
3 min read
PyPI's litellm 1.107.0 Compromised: Malicious Code Steals Data, Executes Commands; Update Urgently.
Roman Dubrovin
Roman Dubrovin
Roman Dubrovin
Follow
Oct 22
PyPI's litellm 1.107.0 Compromised: Malicious Code Steals Data, Executes Commands; Update Urgently.
#
security
#
malware
#
python
#
pypi
Comments
Add Comment
7 min read
A malicious LiteLLM release stole credentials on install
RC
RC
RC
Follow
Oct 22
A malicious LiteLLM release stole credentials on install
#
supplychain
#
pypi
#
litellm
Comments
Add Comment
4 min read
Security breach in LiteLLM library with data theft
Hacks.gr
Hacks.gr
Hacks.gr
Follow
Oct 22
Security breach in LiteLLM library with data theft
#
litellm
#
python
#
docker
#
pypi
Comments
Add Comment
2 min read
Your pip install Just Ran Someone Else's Code: A Practical Defense Guide Against PyPI Supply Chain Attacks
EME GUG
EME GUG
EME GUG
Follow
Oct 21
Your pip install Just Ran Someone Else's Code: A Practical Defense Guide Against PyPI Supply Chain Attacks
#
python
#
security
#
pypi
#
supplychain
Comments
Add Comment
8 min read
Popular LiteLLM library hacked, version with hidden malware released
Hacks.gr
Hacks.gr
Hacks.gr
Follow
Oct 21
Popular LiteLLM library hacked, version with hidden malware released
#
litellm
#
python
#
github
#
pypi
Comments
Add Comment
2 min read
Typosquatting and Slopsquatting: Defending the Package Install Path
yutianle
yutianle
yutianle
Follow
Oct 14
Typosquatting and Slopsquatting: Defending the Package Install Path
#
supplychain
#
npm
#
pypi
#
cicd
Comments
Add Comment
4 min read
How to use a private PyPI index: from install to twine upload and pip install
Wen Ping
Wen Ping
Wen Ping
Follow
Oct 13
How to use a private PyPI index: from install to twine upload and pip install
#
pypi
#
twine
#
private
#
angusrepo
1
 reaction
Comments
Add Comment
4 min read
readmeta v0.2: --fix rewrites your broken PyPI README links at build time
hao li
hao li
hao li
Follow
Oct 11
readmeta v0.2: --fix rewrites your broken PyPI README links at build time
#
python
#
pypi
#
packaging
#
opensource
Comments
Add Comment
2 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account