Attackers used exposed and stolen credentials to publish malicious LiteLLM 1.107.0 wheels and official container tags on 21 October. The signed 1.106.4 recovery release uses the rotated cosign key, repairs a startup ImportError when the remote cost map is unreachable and removes image-scanner false positives tied to the emSign root and unused packages.
Why it matters: The incident exposed model-provider and infrastructure secrets before applications imported LiteLLM. Version 1.106.4 is now the clean operational floor for the supported 1.106 line, but neither a new signing key nor quieter scanners revoke credentials stolen…
Dosu deprecated its hosted stale-issue bot and recommends better-stale-bot, an Apache-2.0 GitHub Agentic Workflow that reads issue history, summarizes context, and caps each class of write.
Why it matters: The project is a compact example of expressing an agent policy in readable Markdown while constraining mutations through separately configured outputs.
A compromised Axios dependency ran inside an OpenAI macOS signing workflow that used a floating package tag. OpenAI reported no evidence of user-data or product compromise, treated the signing material as compromised, rotated it and issued updated ChatGPT, Codex and Atlas builds.
Why it matters: An agent company with strong model controls was still exposed through an ordinary software dependency and CI configuration. The surrounding build system remains part of AI-product security.