LiteLLM v1.107 compromised "Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials and a remote access trojan (RAT) capable of executing arbitrary code on infected machines through PyPI and Docker registries." The article mentions a previous attack this year hitting over 400k CI pipelines on 2500 organizations.

theregister

LiteLLM supply chain attack hoovers up passwords and secrets

Plus a RAT for good measure - get threat hunting now

GM. I'm once again reminding you to use your CPU governor settings on your linux servers. It might save you a few watts without real performance losses, especially if your system is lightly loaded.

Bummer, HTPC died over the weekend. Guess it's time for an early GN

GM.

Joints have way too many muscles you have to work out to stay healthy. ffs. And don't hit me with "well if you just do compound lifts you'll be fine" just wait till you hurt yourself then lmk if you change your mind.