LiteLLM Python package compromised by supply-chain attack

Re:LiteLLM Python package compromised by supply-chain attack by dist-epoch on Tuesday March 24, 2026 @11:53AM (#47504538)

Virtual machines are that - tiny surfaces to access the host system (block disk device, ...). Which is why virtual machine escape vulnerabilities are quite rare.

[ Parent | on HN ]

Re:LiteLLM Python package compromised by supply-chain attack by bilbo0s on Tuesday March 24, 2026 @03:54PM (#47508153)

I feel like in some cases we should be using virtual machines. Especially in domains where risk is non-trivial.

How do you change developer and user habits though? It's not as easy as people think.

[ Parent | on HN ]