Compromised LiteLLM 1.107.0 on PyPI Installs Credential Stealer and Backdoor

·1 views

A malicious version, LiteLLM 1.107.0, was published to the Python Package Index (PyPI) repository. According to the linked SafeDep report, installing this compromised release deploys a credential-stealing program and a backdoor on affected systems. The source material provided is limited to the headline and link, so further technical details such as timing, scope, and remediation steps could not be confirmed here. Developers who use LiteLLM are advised to review the original report for specifics and check whether they have installed version 1.107.0.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Does a Cloned Voice Stay the Same? Scoring Qwen3-TTS With ECAPA

Written with AI assistance. Every number comes from my own runs; if you spot an error, tell me and I'll fix it. I had Qwen3-TTS 1.7B read two long narrations, one in Korean and one in English, and scored every sentence chunk against the voice sample using ECAPA speaker embeddings. In these two runs, English held steady and Korean wandered more: the English narration had a median similarity of 0.861 and no chunk below 0.75, while the Korean one had a median of 0.806, with 10 of its 51 chunks under 0.75. The practical lesson is short.

0 comments Read more at DEV Community

ProgrammingHacker News ·

GitHub Reports Another Service Incident, Per Its Status Page

GitHub has logged a new incident on its public status page, as referenced by a Hacker News post. The item links directly to the incident report hosted on githubstatus.com. The post drew modest attention on Hacker News, with 8 points and one comment at the time of capture. The source material provides no details on the affected services, the duration of the disruption, or its root cause. Readers seeking specifics should consult the linked GitHub status incident page.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Detecting Website Technologies: Why Reliable Domain Analysis Is Hard

A developer building SalesData.in, a domain-intelligence platform, explains the difficulties of identifying the technologies behind a website. Detection is complicated because sites may conceal fingerprints, serve assets through CDNs, customize installations, or run several technologies at once. Relying on one signal risks false positives and false negatives, so the approach combines evidence such as HTML patterns, asset paths, HTTP headers, DNS records, and SSL data. Engineering challenges include handling incomplete responses, keeping records consistent across rescans, validating detection rules against real sites, and distinguishing missing signals from failed scans. The author notes that technology detection is only one part of broader domain analysis.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

UE5 Devlog Details Blueprint Sprint and Stamina System Linked to Hydration and Health

A developer's devlog describes a Blueprint-based sprint and stamina system built in Unreal Engine 5 and tied to the player's health and thirst. Hydration drains at a steady rate while walking, and sprinting uses stamina while speeding up that loss. When stamina runs out, the added sprint drain stops, but the normal drain continues. Reaching zero hydration causes the player to start losing health, so resource management becomes part of movement. Drinks restore hydration, medkits recover health, and the UI highlights critical levels as resources drop.

0 comments Read more at DEV Community