最近相次いで人気ライブラリがサプライチェーン攻撃の被害を受けている。3月24日には、人気のPythonパッケージ「LiteLLM」も被害を受けた。LiteLLMは、ChatGPTやGemini、Claudeなど人気のAPIを手軽に切り替えて使えるとい ...

The OpenTelemetry project has announced that key portions of its declarative configuration specification have reached stable ...

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

MicrosoftがAI搭載アプリを開発するためのSDK「Foundry Local」を公開しました。Foundry ...

Library Manager lands in dy Install Libs with one-click library install, enable, and disable for Houdini packages.

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how quickly a compromised package can propagate through the ecosystem.