AINave Daily
A poisoned LiteLLM release exposes the AI gateway as a target
On October 21, attackers took over LiteLLM's release pipeline and published version 1.107.0 to PyPI and Docker with malware that steals cloud, developer and AI provider credentials. Agent credentials were the other big issue of the day: 1Password now signs agents into sites without showing them passwords, and five major US banks are restricting third-party agents in customer accounts. On the cost side, OpenAI's Decisions API is now generally available, and public indexes show token prices down by about half from their peaks. Here are the 5 stories that matter most, then 15 briefs.
On the front page
- 1
- 2
- 3
- 4
- 5
Plus 15 briefs.
