if you use it:
pip show litellm
on 1.107.0? pin 1.106.2, rebuild the machine, rotate every secret it could reach.
everyone rushed to plug ai into everything. hackers plugged in too.
ONE ROUTINE UPDATE HANDED HACKERS YOUR AI KEYS AND PASSWORDS.
litellm, the library devs use to plug apps into openai, anthropic and gemini, shipped version 1.107.0 on pypi and docker with a stealer inside.
it gets 92M+ downloads a month.
about 4.5 hours later attackers were already logging in with stolen aws credentials, per wiz.
second litellm breach in 7 months. the attackers held github logins of 3 devs. and claude code can drop a github token into a response that ends up in litellm logs.
want it all in one run? paste this into claude code:
"role: home network auditor. my lan, read-only.
task: list every device: ip, mac, vendor, randomized mac yes/no, type guess. flag cameras, mics, unknown phones. end with a plan: new wifi password, wps off, guest net for iot"
CLAUDE CODE FOUND A HACKER'S DEVICE ON MY HOME WIFI
i have 9 devices: phone, laptop, tv, a couple of smart plugs. asked it to list everything on my router. it found 11
4. router: new wifi password, wps off. reconnect only yours. plugs, bulbs and tv go on the guest network so a hacked one can't reach your laptop
5. a camera you didn't install, or it comes back after the reset? don't unplug. screenshot the client list with timestamps first
4. router: new wifi password, wps off. reconnect only yours; plugs, bulbs, tv go on the guest network
5. a camera you didn't install, or it comes back? don't unplug. screenshot the client list first
3. for each unknown row ask: randomized mac? vendor? phone, camera, or smart-home?
a randomized address almost always means a phone or laptop. that's the tell.
the dossier in this video was generated end-to-end: layout, panels, the brain — all HTML → rendered video.
the pipeline isn't "AI makes video". it's "agents make the thing that makes the video".
the part nobody prices in: iteration is free.
"make the camera slower" isn't a request to a freelancer — it's a parameter. 200 variants of the same shot, overnight, for the cost of tokens.
volume of experiments is the new skill ceiling.