litellm encountered a PyPI supply chain attack, allowing the theft of all sensitive credentials such as SSH keys with a simple installation
Andrej Karpathy posted on the X platform that litellm has encountered a PyPI supply chain attack, where executing pip install litellm can steal SSH keys, AWS/GCP/Azure credentials, Kubernetes configurations, git credentials, environment variables, encrypted wallets, SSL private keys, CI/CD keys, and database passwords.
litellm has a monthly download volume of 97 million, and the risk can spread to all projects that depend on litellm, such as dspy. The version with the malicious code was online for less than about 1 hour, and it was discovered due to a flaw in the attack code that caused Callum McMahon's machine to run out of memory and crash. Andrej Karpathy stated that supply chain attacks are the most threatening issue in modern software, as each installation of dependencies can introduce tampered packages deep within the dependency tree, leading him to increasingly prefer reducing dependencies and using LLM to directly implement simple functions.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Goldman Sachs, OKX Cut Off From Claude AI in Hong Kong

B.AI infrastructure upgrade, powerful Skills are ready to launch

WORLD3 releases AI strategic white paper: has processed over 100 billion LLM tokens

The number of users for B.AI LLM services has exceeded 1 million

B.AI LLM Platform Surpasses 800,000 Users Milestone
Key Takeaways: B.AI LLM platform’s user base exceeds 801,057 as of April 14. The platform emphasizes “permissionless access”…

The number of users of the B.AI LLM service platform has exceeded 750,000

Security Company: AI agent's encrypted payment infrastructure has significant security vulnerabilities, LLM router has led to the theft of a $500,000 wallet

Research finds that third-party AI routers have security vulnerabilities, which may lead to cryptocurrency theft

Ramp Labs Introduces Multi-Agent Memory Sharing Solution, Token Consumption Reduced by Up to 65%

Base announces the selected list for Base Batch 003 Accelerator, with 12 projects from AI and DeFi fields making the cut

Vitalik shares a local private LLM solution, emphasizing privacy and security first

Claude Code 500K Lines Code Leak Fully Organized, What's the True Core of the AI Agent?

Tether's QVAC Launches Synthetic AI Dataset and Consumer Application

a16z Co-founder: The combination of OpenClaw and Pi Coding Agent is one of the top 10 software breakthroughs of all time

Tether releases a cross-platform BitNet LoRA framework, supporting consumer-grade GPUs and large model training and inference on smartphones

"Uncle was injured by a lobster" tricked out of 440,000 dollars, is AI agent really that good at breaking through?
80% Win Rate to 40% Drawdown: An AI Trader's Brutal Recalibration at WEEX AI Wars
Dive into the technical blueprint of an AI trading system built on LLaMA reasoning and multi-agent execution. See how Quantum Quaser uses confidence thresholds & volatility filters at WEEX AI Wars, and learn the key to unlocking 95% win rate trades.

Ardoino’s 24/7 asset plan depends on buyers willing to wait for cash

Wallets, fintechs, and platforms target the freelancer market: why Argentina is a key market

Greece ends years of crypto tax uncertainty with new 10% levy on Bitcoin profits

Ethereum software bug triggers emergency fixes across major layer-2 networks

Kraken Owner Invests in Altcoin, Considers Further Purchases. You Should Recognize Him

Stablecoins offer sub-cent payments, Armstrong says, as critics flag risks

Analysis: Stablecoins, Payments, and Prediction Markets Have Become New Growth Points for Crypto Companies, but Profitability Remains Challenged

Nubank Suspends Crypto Withdrawals: What We Know So Far

Buffett's Successor Faces Setback, Google Holdings Show $3 Billion Unrealized Loss

Banking Outage in Japan: 128 Banks 'Frozen' at Once

Beyond APY: Saying Goodbye to Black Box Trust and Reassessing the Security Logic of ETH Staking

Argentine Bitcoiners Debut “The Genesis Of Satoshi Nakamoto” Artwork In Downtown Buenos Aires

Broadcom (AVGO) : AI Growth, Fund Positioning, and Guarantee Risk
Broadcom (AVGO) recently fell with the semiconductor sector, closing down 10.43% at $291.53 on November 5. The shares rebounded more than 4% in premarket trading on November 6. Concerns that election results could lead to tighter AI rules and slower data center approvals contributed to a broad sell-off, with a semiconductor index falling about 12%. The move appears tied mainly to sector sentiment and policy concerns, with no clear company-specific negative catalyst identified.
Institutional trading and AI growth expectations are also in focus. ARK funds sold about $134 million of Broadcom shares over two sessions while adding to SpaceX. Citi maintained its Buy rating and projected that Broadcom’s AI semiconductor revenue could reach $115 billion in fiscal 2027, roughly doubling year over year. Broadcom had approximately $179.2 billion in signed contracts as of the prior quarter, while analysts estimated fourth-quarter AI chip revenue at about $21.7 billion. These forecasts will need to be tested against future results.
Contingent guarantees are another point for investors to monitor. Broadcom is providing guarantees tied to Anthropic’s AI rack-leasing arrangement, involving about $29 billion in the first phase and a second-phase plan of up to $43 billion. Banks plan to issue $21 billion in bonds to support related chip financing. The guarantee amounts are not the same as debt already incurred, but they add a potential risk to assess. Broadcom is scheduled to report its next quarterly results on December 9, when management’s outlook for fiscal 2027 AI demand will be closely watched. This article is for informational purposes only and is not investment advice.
Goldman Sachs, OKX Cut Off From Claude AI in Hong Kong
B.AI infrastructure upgrade, powerful Skills are ready to launch
WORLD3 releases AI strategic white paper: has processed over 100 billion LLM tokens
The number of users for B.AI LLM services has exceeded 1 million
B.AI LLM Platform Surpasses 800,000 Users Milestone
Key Takeaways: B.AI LLM platform’s user base exceeds 801,057 as of April 14. The platform emphasizes “permissionless access”…





