Security Update: Suspected Supply Chain Incident | liteLLM
Status: Active investigation Last updated: March 27, 2026 Update (March 30): A new clean version of LiteLLM is now available (v1.83.0). This was released by our new CI/CD v2 pipeline which added isolated environments, stronger security gates, and safer release separation for LiteLLM. Update (March 27): Review Townhall updates, including explanation of the incident, what we've done, and what comes
Copilot SDK in technical preview - GitHub Changelog
The Copilot SDK is now available in technical preview, providing language-specific SDKs for programmatic access to the GitHub Copilot CLI. Available SDKs The Copilot SDK is available in four languages: Node.js / TypeScript: @github/copilot-cli-sdk Python: copilot Go: github.com/github/copilot-cli-sdk-go .NET: GitHub.Copilot.SDK Key features All SDKs provide a consistent API with: Multi-turn conver
SSH keys stolen by stream of malicious PyPI and npm packages
A stream of malicious npm and PyPi packages have been found stealing a wide range of sensitive data from software developers on the platforms. The campaign started on September 12, 2023, and was first discovered by Sonatype, whose analysts unearthed 14 malicious packages on npm. Phylum reports that after a brief operational hiatus on September 16 and 17, the attack has resumed and expanded to the
Modular: Mojo🔥 - It’s finally here!
In this blog post, we’ll take a high-level tour of what’s inside the Mojo SDK. First, let’s quickly review what Mojo is and how it can benefit you. Mojo: a high performance 'Python++' language for computeMojo is a new programming language for AI developers that will grow into being a superset of Python over time. It already supports integrating with arbitrary Python code seamlessly and has a scala
Announcing Astral, the company behind Ruff
TL;DR: I’ve started a company, Astral, to continue building high-performance developer tools for the Python ecosystem — to keep building Ruff, and to build more Ruff-like things. We’ve raised $4m in seed funding led by Accel, with participation from Caffeinated Capital, Guillermo Rauch (Vercel), Solomon Hykes (Docker), David Cramer (Sentry), and others. I built Ruff to test a theory: that Python t
March 20 ChatGPT outage: Here’s what happened
An update on our findings, the actions we’ve taken, and technical details of the bug. We took ChatGPT offline earlier this week due to a bug in an open-source library which allowed some users to see titles from another active user’s chat history. It’s also possible that the first message of a newly-created conversation was visible in someone else’s chat history if both users were active around the
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
https://openai.com/index/openai-to-acquire-astral/
GitHub - D4Vinci/Scrapling: 🕷️ An undetectable, powerful, flexible, high-performance Python library to make Web Scraping Easy and Effortless as it should be!
GitHub - Olshansk/rss-feeds: Generate RSS feeds for all the blogs that don't have one
Introducing Socket Firewall: Free, Proactive Protection for Your Software Supply Chain
Settings | uv
https://secure.software/
Configuration of a minimum package age required before a PR is created · Issue #3651 · dependabot/dependabot-core
GitHub - astral-sh/rye: a Hassle-Free Python Experience
Japan Blames North Korea for PyPI Supply Chain Cyberattack
CodSpeed: Optimize Performance, Eliminate Regressions
Amazon.co.jp: 実装で学ぶフルスタックWeb開発 エンジニアの視野と知識を広げる「一気通貫」型ハンズオン: 株式会社オープントーン, 佐藤大輔, 伊東直喜, 上野啓二: 本
CVE-2022-0329 and the problems with automated vulnerability management
Getting Started with Natural Language Processing
Security concerns · Issue #1026 · langchain-ai/langchain