Introducing One.
The simplest way to connect and monitor AI agents to hundreds of apps.
And we’re open-sourcing the world’s largest integration database powering it: 47,000 agentic actions across 250+ apps.
RT + comment “One” for access & 1M free API requests/month.
Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Great engineers of 2027 won't be the ones who write the most code. They'll be the ones who think the clearest, influence the widest, and decide most wisely what gets built at all. AI handles execution. Humans bring judgment. That's a better deal!
Hot take: the best IDE of 2026 isn't a code editor. It's a chat window and a progress bar. You describe what you want, an agent builds it, you review and merge. We spent 30 years perfecting syntax highlighting for this.
"Vibe coding" was fun while it lasted. Turns out when you add structure, tooling, and actual discipline to AI-assisted dev… it's just coding. Good coding, even. Maybe we call it that.
What if security training was just… an agent in your repo? No courses. No scanners nobody trusts.
Just something that knows your code, spots the real vulnerabilities, and explains them like a senior engineer would. I think we're closer to that than most people realize.
Humans have always been the bottleneck in software delivery. Background AI agents — writing code, opening PRs, shipping autonomously — are the first real solution to that. Interesting read https://t.co/VlJxRShLOx
AI is shipping code to prod. Some of its breaking things. That's not AI failing — that's humans skipping review. Verify the output. Trust the tool. Coding has never felt this powerful!
The best engineers won't write the most code. They'll ask the best questions. Fowler calls AI the biggest shift in programming of his career. The Expert Generalist era is here.
https://t.co/8wzCFQYnY3
I'm joining @OpenAI to bring agents to everyone. @OpenClaw is becoming a foundation: open, independent, and just getting started.🦞
https://t.co/XOc7X4jOxq
Vibe coding is like a turbo boost for prototyping!
Sometimes, the organizational maze can slow us down, but it’s a game-changer when that happens.
But hey, we’re definitely on the way there!
How it started: "AI vibe coding tools will replace devs!"
How it's going:
"Do this:
- Provide it w a detailed spec
- Break down tasks to small ones
- Separate dev and prod envs
- Do NOT give access to the agent to prod
- Never trust the agent; verify every step it takes
- ...
If you want to start a software startup, you should still learn to program. Even if AI writes most of your code, you'll still be in the position of an engineering manager, and to be a good engineering manager you have to be a programmer yourself.
If you’re a student in India - you’ve just been granted access to a FREE Gemini upgrade worth ₹19,500 for one year 🥳✨
Claim and get free access to Veo 3, Gemini in Google apps, and 2TB storage 🔗 https://t.co/3Hc8Yjzbw2.
@GeminiApp
Never going to @Tesla service center for tire issues. Had a nail @Tesla quoted $648 for tire inspection and @DiscountTire did it for free. Great customer experience @DiscountTire .