LiteLLM 1.107.0 compromised: how the .pth backdoor works, and how to check and clean up
LiteLLM 1.107.0 ran a credential stealer at every Python start. How the attack worked, how to check hosts safely, and what to rotate.
Developer tooling
Containers, CI and the small tools that make a team faster.
Developer tooling articles
GhostAction is back: how a GitHub Actions workflow steals secrets from your git history
How the GhostAction GitHub Actions workflow steals secrets from git history, how to check your repos, what to rotate, and what stops it.