šØ URGENT: Unga Python Library-la POISON irukku! šØ
Andrej Karpathy ā OpenAI founding member, Tesla AI former head ā yesterday oru SHOCKING tweet pottaru.
LiteLLM nu oru popular Python library ā monthly 97 MILLION downloads ā adhula yaaro malicious code inject pannittaanga š
Neenga just pip install litellm pannalae podhum...
š SSH keys ā GONE
š AWS/Azure/GCP credentials ā GONE
š Database passwords ā GONE
š Crypto wallets ā GONE
š API keys ā GONE
ATM-la skimmer maadhiri ā ellaamey normal-aa theriyum... but background-la unga ELLAA credentials-um thiruduppaanga š±
Best part? Attacker VIBE CODING use panni code ezhuthunaar... adhula oru bug vandhudhu... adhaan CATCH aachchu š
Illana WEEKS-ku theriyaaama pogirukku.
Karpathy solraar: "Supply chain attacks are the SCARIEST thing in modern software."
š”ļø IPPO-VE check pannunga:
ā pip show litellm
ā Version 1.82.7 or 1.82.8 na IMMEDIATELY uninstall
ā All credentials ROTATE pannunga
Indha video EVERY developer-kittayum share pannunga š
...
Suggested Credits
Tags, Events, and Projects