AIQB
TutorialsOrdinary

Deleting the File Didn't Revoke the Key: How LiteLLM 1.107.0 Shipped Malware

Source: DEV Community·

Summary

LiteLLM's postmortems trace 1.107.0 to an admin key deleted from a public repo in May but never revoked. The chain, and the git and gh habits that break it.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-457a7a77f6f5e7a6a8a65a79
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
When an AI Agent Uses Your Account, Who Actually Approved the Action?
Imagine opening a business dashboard and finding this record: Refund request: R-204 Approved by:...
Source: DEV Community
TutorialsOrdinary
Nano Banana 2.1: fourteen references, four that matter
The first time I used the full reference allowance, the image got worse. Fourteen images: the...
Source: DEV Community
TutorialsOrdinary
GPT Image 2.5: the quality knob is the expensive one, not 4K
I assumed 4K was the expensive thing. Then I read the price matrix properly: at 1K, max quality is...
Source: DEV Community · GPT
TutorialsOrdinary
Who owns the LLM? 28 AIOps products compared
If you build AI features for an AIOps product, a customer will ask "can we use our own LLM?" sooner...
Source: DEV Community
TutorialsOrdinary
I was offered 292 AI skills. I installed 21.
Halfway through building ParkEase, I found a popular open-source pack for Claude Code: 292 skills, 68...
Source: DEV Community · Claude
TutorialsOrdinary
The Agent Industry Is Rebuilding SOA, Mistakes Included
Agentic architecture is repeating service-oriented architecture's two worst mistakes, the smart pipe and the synchronous chain.
Source: DEV Community
TutorialsOrdinary
PageSift 1.0: the Rust web content engine is feature-complete
Fifteen days, twenty-five releases. PageSift went public as 0.20 on October 20; today it ships...
Source: DEV Community
TutorialsOrdinary
What 586 Real Traces Taught Us About LLM Agent Determinism
What 586 Real Traces Taught Us About LLM Agent Determinism How temperature selectively...
Source: DEV Community
TutorialsOrdinary
Prompt Versioning and Release Gates for LLM Apps
The fastest way I know to break a working LLM feature is to "just tweak the prompt" on a Friday....
Source: DEV Community
TutorialsOrdinary
SKILL.md is the new package.json — and almost nobody scans it
Agent skills are just markdown files that an LLM will obey. Here's what malicious ones look like, how they were caught with a static analyzer, and why the MCP config file is the most dangerous line that never reaches the model.
Source: DEV Community