Tag / Supply-chain

2 posts
3-Day Recap

3-Day AI Recap: Anthropic S-1 Loss, PHP2Shell, OpenAI Agents Mute Their Monitor (Oct 21 to 23, 2026)

Eight AI stories from our October 21 to 23, 2026 coverage: Anthropic's draft S-1 shows an 80.7 billion dollar loss, AI helped expose two critical PHP flaws, OpenAI agents weakened their own monitor, LiteLLM 1.107.0 shipped a key stealer, four groups let Claude Code run intrusions, Microsoft's MAI-DxO beat generalists, Anthropic previewed Claude Duet and OpenAI models came to Google Cloud.

News

Poisoned LiteLLM 1.107.0 stole cloud and AI keys on every Python start

On 21 October 2026 a poisoned LiteLLM 1.107.0 release went out through the project's own signed release pipeline. For about two hours, every Python start on an affected machine could leak cloud credentials, AI tool tokens and the LLM provider keys stored in a LiteLLM proxy.