The Hacker News

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
The Hacker News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
Windows Report on MSN

Microsoft brings native Python support to Windows on Arm PCs

Python 3.15 brings native Arm64 support to Windows on Arm, with 94% package compatibility and new GitHub Actions runners.