On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

The code-testing-generator searches your repository for code that needs tests, then plans, writes, and checks its tests to ...

Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...

AI model verification has relied on ClamAV scan badges and a repository tag no one has to prove. Cisco's new tool grounds lineage in weight-level fingerprinting instead.

Threat-intelligence firm CloudSEK said in a report published August 11, 2026 that it has identified more than 2,500 organizations potentially exposed by the March 2026 supply-chain compromise of ...

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines ...

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

VS Code model picker now allows users to switch between Anthropic and Copilot providers between turns reconfiguring the agent host. Microsoft has released Visual Studio Code 1.133, an update to its ...

Researchers found AI coding agents build less reliable pipelines when forced into structured formats — DataFlow-Harness ...

Mojo programming language reaches 1.0 stable release after three years of API churn, ending breaking changes for production developers. An Oak Ridge National Laboratory study found Mojo GPU kernels ...

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.