Re:LiteLLM Python package compromised by supply-chain attack
by mikert89 on Tuesday March 24, 2026 @04:56PM
(#47509143)
Similar to delve, this guy has almost no work experience. You have to wonder if YC and the cult of extremely young founders is causing instability issues in society at large?
[ Parent
| on HN ]
Re:LiteLLM Python package compromised by supply-chain attack
by gopher_space on Tuesday March 24, 2026 @06:21PM
(#47510319)
It's interesting to see how the landscape changes when the folks upstream won't let you offload responsibility. Litellm's client list includes people who know better.
Re:LiteLLM Python package compromised by supply-chain attack
by zdragnar on Tuesday March 24, 2026 @05:06PM
(#47509306)
Welcome to the new era, where programming is neither a skill nor a trade, but a task to be automated away by anyone with a paid subscription.
Re:LiteLLM Python package compromised by supply-chain attack
by mikert89 on Tuesday March 24, 2026 @05:27PM
(#47509612)
alot of software isnt that important so its fine, but some actually is important. especially with a branding name slapped on it that people will trust
Re:LiteLLM Python package compromised by supply-chain attack
by whattheheckheck on Tuesday March 24, 2026 @10:02PM
(#47512273)
The industry needs to step up and plant a flag for professionalization certifications for proper software engineering. Real hard exams etc
Re:LiteLLM Python package compromised by supply-chain attack
by jacamera on Wednesday March 25, 2026 @06:34AM
(#47515541)
I can't even imagine what these exams would look like. The entire profession seems to boil down to making the appropriate tradeoffs for your specific application in your specific domain using your specific tech stack. There's almost nothing that you always should or shouldn't do.
Re:LiteLLM Python package compromised by supply-chain attack
by xenophonf on Wednesday March 25, 2026 @07:52PM
(#47524935)
All engineering professions are like that. NCEES has been licensing Professional Engineers for over a hundred years. The only thing stopping CS/SE is an unwillingness to submit to anything resembling oversight.
Re:LiteLLM Python package compromised by supply-chain attack
by leftyspook on Wednesday March 25, 2026 @08:24AM
(#47516407)
All software runs on somebody's hardware. Ultimately even an utterly benign program like `cowsay` could be backdoored to upload your ssh keys somewhere.
Re:LiteLLM Python package compromised by supply-chain attack
by utrack on Wednesday March 25, 2026 @08:44AM
(#47516599)
https://xkcd.com/2347/ , but with `fortune -a` and `cowsay` instead of imagemagick