Thankfully the LiteLLM package has now been marked as "quarantined" on PyPI so attempting to install the compromised update via pip et al shouldn't work

inna nurtured frequency ♾

There is always something moving, brewing.

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database

NFC Pushtx is pretty neat. Preferred flow with MK5.

Lion Is Lion

My development approach (since ca. 2021) - maximize isolation & minimize blast radius: - Never install any dev tools on the main system - Never run npm/pip/etc install locally - Use a VM per project/group of related projects - Never share prod credentials with dev VMs - Never

axios Got Hijacked and Your Machine May Be Compromised Link Below 🔽

I have updated my Quantum Infeasibility (?) article with new addenda given the latest research coming out that is relevant to the security of elliptic curve cryptography (ECC) and bitcoin private keys. bc1984.com/quantum-infeas… #CRQC Ranking of bitcoin address types for security

x.com/i/article/2040…

Beautiful in every situation 🎵🎶

Hermes Agent now comes packaged with Karpathy's LLM-Wiki for creating knowledgebases and research vaults with Obsidian! In just a short bit of time Hermes created a large body of research work from studying the web, code, and our papers to create this knowledge base around all

You can now use Ratatui in Python! 🐀🥳 🐍 PyRatatui — Python bindings for Ratatui 💯 Build high-performance TUIs in Python with 35+ widgets, async & effects 🦀 Backed by Rust via PyO3 ⭐ GitHub: github.com/pyratatui/pyra… #rustlang #ratatui #tui #python #library #bindings

24 hours of mempalace being open source. Here's what happened: The dev community tore it apart. This is how open-source projects can improve: AAAK was labeled "30x lossless compression." It's lossy summarization. Fixed. Token counts used len(text)//3 instead of a real

i'm not satoshi, but I was early in laser focus on the positive societal implications of cryptography, online privacy and electronic cash, hence my ~1992 onwards active interest in applied research on ecash, privacy tech on cypherpunks list which led to hashcash and other ideas.

The Highest, Satta Massagana 🙏

We wrote up everything we do to secure our open source projects at Astral

I sign, I send, Bitcoin, Is Amazing 🟠

Recounciliation, of the man, them, that run not.