AI developer tools stories

Oct 21, 2026

LiteLLM supply chain attack distributes malware stealing credentials and remote access trojan

Unknown attackers compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) through PyPI and Docker registries containing malware designed to steal cloud and AI credentials plus a remote access trojan capable of executing arbitrary code. Users who ran the compromised version should treat their secrets as compromised.

Oct 21, 20263 sources

Anthropic's Claude identifies 493 security issues in open-source projects

Anthropic deployed its Claude AI models to analyze 25 widely used open-source projects, focusing on reducing attack surfaces by identifying code that attackers could improperly access. The analysis flagged 493 security issues. The company has also updated Claude Security to continuously monitor connected repositories and automatically rescan when changes occur.

Oct 21, 20262 sources