Re:LiteLLM Python package compromised by supply-chain attack
by dotancohen on Tuesday March 24, 2026 @01:45PM
(#47506465)
My vibe coded personal projects don't have the source code available for attackers to target specifically.
Re:LiteLLM Python package compromised by supply-chain attack
by nimih on Tuesday March 24, 2026 @02:56PM
(#47507464)
It might surprise you to learn that a large number of software exploits are written without the attacker having direct access to the program's source code. In fact, shocking as it may seem today, huge numbers of computers running the Windows operating system and Internet Explorer were compromised without the attackers ever having access to the source code of either.
Re:LiteLLM Python package compromised by supply-chain attack
by sersi on Wednesday March 25, 2026 @04:37AM
(#47514791)
I'm actually curious if the windows source code leak of 2004 increased the number of exploits against windows? I'm not sure if it included internet explorer. I remember that windows 2000 was included back then.
Re:LiteLLM Python package compromised by supply-chain attack
by heavyset_go on Tuesday March 24, 2026 @02:37PM
(#47507202)
You don't need open source access to be exploitable or exploited
No free lunch. LLMs are capable of writing exploitable code and you don’t get notifications (in the eg Dependabot sense, though it has its own problems) without audits.