LiteLLM 1.107.0 on PyPI is backdoored — pull it and rotate keys
The gateway's second poisoning this year caps a rough week: critical PHP and Railway fixes too, plus PyTorch on TPUs and Agent Skills going neutral.
Copy markdown
A credential stealer shipped as a tagged release
LiteLLM 1.107.0 on PyPI and Docker Hub ran a credential stealer at Python startup and beaconed to a backdoor hourly, sweeping cloud, AI, and proxy keys — the gateway's second supply-chain hit this year. Uninstalling isn't enough: assume the host is burned, rotate every key it could reach, and pin to the clean 1.106.2.
PyTorch runs on TPUs by swapping one string
Google and Meta open-sourced TorchTPU, running native PyTorch on Google TPUs with eager mode and torch.compile — in the simple case you change "cuda" to "tpu". It's a real escape from CUDA-only lock-in, so training and inference can chase cheaper TPU capacity, though peak throughput still needs tuning.
Agent Skills goes vendor-neutral
Anthropic donated Agent Skills — the SKILL.md format — to the Agentic AI Foundation under the Linux Foundation, after 70+ platforms adopted it. The skills you write for Claude Code now target a standard governed outside any single vendor, lowering the risk of betting your workflows on it.
Two critical RCEs patched in PHP
PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix PHP2Shell (CVE-2026-109618/109619), two remote-code-execution bugs rated 9.2 and reported as already being exploited. Any internet-facing PHP needs patching today.
Railway tells users to rotate everything
Railway disclosed that an intruder may have decrypted some customer environment variables, paused deployments, and urged everyone to rotate env vars and API keys. If you host on Railway, treat your secrets as exposed and cycle them now.
Canva ships its own image model with an API
Canva Craft is Canva's in-house image model, live in Dream Lab and as a public API preview at up to 2K resolution (billed in AI credits), with MCP support promised. Designers get a Canva-native generator to wire into pipelines without leaving the ecosystem.