A three-day dependency cooldown would have kept the backdoored LiteLLM release out of your project. Here's how to set one up with uv or pip: realpython.com/python-suppl...
Real Python
@realpython.com
Online #Python Training & Expert Community: Tutorials, Video Courses, Books, Quizzes...and More! Join 1M+ Pythonistas at http://realpython.com
Today at 20:00 UTC: two AI coding agents, one Python task, a quick prompt vs. a careful one. Free on Zoom. Come say hello: realpython.com/live/real-py...
🐍📩 Pycoders Weekly (Issue 758) — Security, Optimization, itertools, and More pycoders.com/issues/758
Do you write careful prompts for AI agents, or send one line and hope? Tomorrow we try both on the same Python task, live and free on Zoom. Wed, 20:00 UTC: realpython.com/live/real-py...
📰🐍 Get the best Python links of the week: PyCoder’s Weekly Issue #758: Security, Optimization, itertools, and More (2026-10-27)
PyCoder’s Weekly | Issue #758
Security, Optimization, itertools, and More
pycoders.com
Check your Python environments and Docker images for LiteLLM 1.107.0. It carried a stealer that ran every time Python started and sent AI and cloud keys to an attacker. If it ran on a machine, replace those keys. realpython.com/ai-news-week...
Attackers can register the package names your AI coding agent makes up. In one 2024 study, 21.7% of the packages that open-source models suggested didn't exist. Make your agent ask before it installs: realpython.com/python-suppl...
🐍 Python Term of the Day: reentrant (Computer Science Glossary) A property of code that can be safely interrupted partway through and entered again before an earlier call finishes, because each call keeps its own state.
realpython.com