The LiteLLM 1.107.0 release on PyPI carries a credential stealer and a remote code execution backdoor. All seven wheels (Linux, macOS, Windows) install them as three files in site-packages . Both run when any Python process starts on the host, even one that never imports litellm . The upstream GitHub source does not contain them. LiteLLM confirmed the compromise in its incident report , which lists remediation steps. PyPI removed the release by 13:23 UTC on 2026-10-21. The Docker images v1.107.0 , latest , main-latest , and main-stable on Docker Hub and GHCR also carried the malicious code between 11:46 and 14:20 UTC. Versions 1.106.2, 1.107.0rc1, and 1.107.0rc2 are clean. The companion
Hacker News2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
Amy Acton, the Democratic candidate for governor of the US state of Ohio, has called an attack ad against her that features her estranged mother "despicable". Acton commented on the campaign ad from her Republican opponent, Vivek Ramaswamy, on Wednesday evening, saying: "This is despicable, what he's done". In the ad Acton's mother, Donna Arthur, says Acton "lied her entire life". But it does not mention that Arthur's husband was charged with raping Acton when she was a child and that Acton and her brother were then removed from Arthur's custody. Since it launched on Monday, the ad has generated political backlash and cast a national spotlight on the race. Acton and Ramaswamy are both
BBC World2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
Kwerl @lemmy.zip to science English · 8 hours ago How tech billionaires are disrupting biomedical science www.nature.com external-link message-square 2 link fedilink arrow-up1 20 arrow-down1 4 arrow-up1 16 arrow-down1 external-link How tech billionaires are disrupting biomedical science www.nature.com Kwerl @lemmy.zip to science English · 8 hours ago message-square 2 link fedilink alert-triangle You must log in or register to comment. They ruin everything they touch. minus-square SubArcticTundra @lemmy.ml link fedilink English arrow-up 5 · 7 hours ago So much disruption
Lemmy / Science2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
IGUAZÚ NATIONAL PARK, Argentina — Few times in my life have I felt the enormity and power of nature. Standing at the edge of Iguazú Falls, on the Brazil-Argentina border, was one of them. Iguazú isn't just one imposing fall, but a complex of cascades spanning more than a mile across both countries. A rain-soaked October in Brazil has sent near-record volumes of water surging over its towering cliffs. Scientists link the relentless rains to this year's Super El Niño , causing extreme weather events across the globe. But what a spectacular force of nature for the lower-than-average number of tourists who braved the deluge this month. The roar of the rushing Iguazú river under your feet
NPR News2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
Exclusive: Sasan Ghandehari’s partnership with religious foundation raises questions about past dealings with republic criticised by Nigel Farage Nigel Farage’s newest billionaire donor was in business with a powerful Iranian religious foundation under the authority of the country’s supreme leader, raising questions about his past dealings with the hardline republic. Hossein Ghandehari, also called Sasan, was little known in the UK until he pledged to give millions to Reform UK this summer and donated £50,000 to Farage to cover the cost of two passes for the Davos World Economic Forum. He has said he is moving his tax residency from Switzerland to the UK in order to make “regular payments”
The Guardian / World2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
After renaming Lake Ontario and the Gulf of Mexico on Google Maps following Trump’s executive orders , Google CEO Sundar Pichai might be drawing the line at the Atlantic Ocean. As reported earlier by The Washington Post , Trump said at a Wednesday night rally that he would “probably pass” on renaming the Atlantic after he contacted Pichai about it, to which Pichai allegedly replied, “Please don’t ask us to do that.” Trump claimed Pichai said, “No, no, no. This time, I’m not doing it,” adding “Oceans are different, sir.” The Verge reached out to Google for comment, but didn’t immediately get a response. Apple has joined Google in making Trump’s name changes on its maps, but some other map
The Verge2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
eMudhra to Exit Global SSL/TLS Certificate Business; | Hacker News Hacker News new | past | comments | ask | show | jobs | submit login [dupe] eMudhra to Exit Global SSL/TLS Certificate Business; 104 points by parimm 3 hours ago | hide | past | favorite | 2 comments Press Release titled “eMudhra to Exit global SSL/TLS Certificate Business; Will Sharpen Focus on Core Enterprise Solutions and trust services other than SSL/TLS” https://www.bseindia.com/xml-data/corpfiling/AttachLive/82503e00-335c-49dc-b022-f4633a08b64 Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search:
Hacker News / Ask2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
A US judge has ordered President Donald Trump to answer questions under oath in his defamation lawsuit against the BBC by 11 December. Trump is suing the BBC over an episode of Panorama that edited together two different sections of a speech he gave before the riot at the US Capitol in 2021. Charles Tobin, a lawyer representing the BBC, said in court that "we still haven't been able to depose the plaintiff" with two months left in the discovery period. Trump cancelled a previous deposition on 16 October, citing "matters of national importance" while he was campaigning in Georgia. The judge in the case, US Magistrate Judge Enjoliqué Lett, said that Trump must sit for the deposition by 11
BBC News2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
HackiOS boots Apple's open-source XNU kernel ( xnu-8796.121.2 , the kernel of iOS 16.5) on Android phone hardware and runs the unmodified iOS 16.5 user space on top of it: launchd → backboardd → SpringBoard → apps. Our own EFI loader, our own replacements for Apple's closed drivers, a UEFI port, and a Linux Wi-Fi driver on a compatibility layer make that possible. No Apple files are in either repository. ios165/fetch.sh downloads the iOS 16.5 IPSW from Apple's own CDN to your machine and extracts what is needed there. HackiOS is an independent research project by OOSEX GANG and is not affiliated with, authorised or endorsed by Apple Inc. iOS, iPhone and Apple are trademarks of Apple Inc.
Hacker News / Show2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
Apple’s Mac Mini M4 has become a popular mini-yet-mighty desktop computer for running local agentic AI 24/7—so much so that it’s been out of stock for months . But with the introduction of the new Mac Mini M6 , the older M4 is no longer as scarce (there was no M5 Mac Mini), and the base model (256-GB hard drive, 16-GB unified memory) is on sale for $649—$150 off MSRP and $250 cheaper than the M6. It’s a good deal for a computer that is plenty powerful for most people, and some M4 Mac Mini configurations can even handle AI tasks. But—and it’s a big but—shoppers should be aware that the M4’s original base price was $599 when it launched in 2024. However, with Apple raising prices on hardware
Wired2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
About me: My name is Solène Rapenne , pronouns she/her. I like learning and sharing knowledge. Hobbies: '(Reproducibility BSD OpenBSD Lisp cmdline gaming security QubesOS internet-stuff). I love percent and lambda characters. Former Qubes OS core team member / OpenBSD developer solene@. Contact me: solene at dataswamp dot org or @solene@bsd.network (mastodon). I'm a freelance OpenBSD, FreeBSD, Linux and Qubes OS consultant , this includes DevOps, DevSecOps, technical writing or documentation work.
Lobsters2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
It’s easy to criticize US automakers and their tepid approach to electric vehicles under the current administration and the expiration of the EV tax credit . It’s also easy to look at the rest of the world’s embrace of EVs and wonder if the US is entering a “Malaise 2.0” era. Which is why GM wants the world to know that it is still focused on its end goals of electrification, autonomy, and improving vehicle quality while reducing development time. At this year’s GM Forward event, company executives announced that its hands-off, eyes-off Super Cruise technology will expand across the lineup and be available on nearly every vehicle. This will include the pickup trucks and the crossovers, and
Ars Technica2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
The AI aggregator leaked nearly 23TB of user data, or 17.6 million files, our researchers discovered. The information includes exactly what you’d expect: AI prompts, the machine’s replies, images, videos, and various corporate documents. Part of me is morbidly curious what kinds of support tickets get generated for sex dolls, but the other part of me thinks it’s best to not know. “how would you get a small cylinder unstuck from one of your dolls? it is imperative that the cylinder remain unharmed” What a great question, it’s not just about the cylinder but the nature of freedom itself! You are right to want to remove the cylinder from your doll… Step one rotate the doll 180 degrees to
Lemmy / Technology2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
Laika CEO Travis Knight explains why he remains hopeful despite the potential for AI to be ‘devastating.’ Wildwood is the most ambitious film yet from Laika, the stop-motion studio best known for the likes of Coraline and ParaNorman . It’s a sprawling fantasy adventure that took five years to complete. The process involved more 230 puppets — including 36 of the main character Prue alone — which were brought to life by a team of 49 animators. All told, more than 1,000 artists worked on the film in some form. Recently Wildwood director and Laika CEO Travis Knight joined a chorus of influencer filmmakers in denouncing the technology. So when I had a chance to speak to Knight ahead of Wildwood
The Verge / AI2h ago
Sign in to keep a line, pass it, or challenge it.
0 likes0 comments
