Hacker News

LiteLLM Python package si wogblẽ to nuzazã-kɔsɔkɔsɔ ƒe amedzidzedze me

Nyaŋuɖoɖowo

13 min read Via github.com

Mewayz Team

Editorial Team

Hacker News
<ŋutilã>

LiteLLM Python Package Compromised: Ŋkuɖodzinya Vevi aɖe le Supply-Chain ƒe Afɔkuwo ŋu

Ecosystem si le ʋuʋu ɖi, si nye egbegbe kɔmpiuta dɔwɔɖoɖowo wɔwɔ ƒe mɔ̃ ŋutɔŋutɔ, dze nuzazãwo ƒe kɔsɔkɔsɔ ƒe amedzidzedze deŋgɔ aɖe dzi le kwasiɖa sia me. Wokpɔe be Python package xɔŋkɔ LiteLLM, si nye agbalẽdzraɖoƒe si naa ŋgɔdonya ɖeka na gbegbɔgblɔ gã ƒe kpɔɖeŋu (LLM) siwo wu 100 tso OpenAI, Anthropic, kple bubuawo gbɔ, dzraa kɔpi vɔ̃ɖiwo ɖo. Nudzɔdzɔ sia, si na ŋɔdzinuwɔlawo tsɔ eƒe tɔtrɔ si ŋu woɖe mɔ ɖo (0.1.815) da ɖe Python Package Index (PyPI) me la, ɖo ƒutsotsoewo ɖe dɔwɔlawo ƒe habɔbɔa me, si te gbe ɖe kakaɖedzi si mebɔbɔ o si míetsɔna ɖoa míaƒe kɔmpiutadziɖoɖo siwo dzi míenɔa te ɖo dzi. Le asitsaha ɖesiaɖe si zãa AI dɔwɔnuwo gome la, menye taɖui dzro aɖe koe esia nye o—enye afɔku tẽ na dɔwɔwɔ ƒe dedienɔnɔ kple nyatakakawo ƒe blibonyenye.

Alesi Amedzidzedzea Dzɔe: Kakaɖedzi ƒe Gbegblẽ

Amedzidzedzea dze egɔme kple LiteLLM dzikpɔla aɖe ƒe ame ŋutɔ ƒe akɔntabubu ƒe asiɖeɖe le eŋu. Esi nuwɔla gbegblẽawo zã mɔnu sia tsɔ ta agbalẽvi la ƒe akpa yeye si me susu vɔ̃ɖi le. Wotrɔ asi le aʋatsokɔdasia ŋu be wòanye adzame eye woaɖo taɖodzinu na wo. Mɔnu aɖe si dzi woato aɖe nutoa me ƒe tɔtrɔ veviwo—abe API safuiwo, nyatakakadzraɖoƒe ƒe ɖaseɖigbalẽwo, kple ɖoɖowɔɖi ƒe nya ɣaɣlawo—tso ɖoɖo siwo me wodae ɖo la me ɖe eme. Vevietɔ la, wowɔ kɔda vɔ̃ɖi la be wòawɔ dɔ le mɔ̃ tɔxɛ siwo menye Windows tɔ o dzi le eɖoɖo ƒe akpaa me ko, eye anɔ eme be aƒo asa na dzedze gbãtɔ le numekuku ƒe sandbox siwo wowɔna le wo ɖokui si siwo zɔna zi geɖe le Windows nɔnɔmewo me.

ƒe nyawo "Nudzɔdzɔ sia te gbe ɖe gbɔdzɔgbɔdzɔ vevi aɖe si le kɔmpiutadziɖoɖowo nana ƒe kɔsɔkɔsɔ me dzi: beléle na ame ƒe akɔntabubu ɖeka si ŋu wogblẽ nu le ate ŋu ade aɖi dɔwɔnu aɖe si dɔwɔƒe akpe geɖe zãna, si ana nyatakakawo nado le afisiafi eye ɖoɖoa nagblẽ."
ƒe nyawo

Nusiwo Gɔmesese Kekeake na Asitsaha Siwo Wotsɔa AI ʋãna

Le dɔwɔƒe siwo tsɔa AI deŋgɔwo dea woƒe dɔwɔwɔ me gome la, amedzidzedze sia nye nudzɔdzɔ ŋuti numekuku si me wobua tame le. LiteLLM nye gɔmeɖoanyi dɔwɔnu na dɔwɔlawo le AI-ŋusẽ ƒe dɔwɔɖoɖowo tum, si wɔa dɔ abe tɔdzisasrã ene le woƒe kɔda kple LLM dɔwɔƒe vovovowo dome. Menye ɖeko sedzidada le afisia fia API safui si wofi ko o; ate ŋu akplɔ ame ayi:

    ƒe nyawo
  • Gadzɔdzɔ Gãwo: Woateŋu azã LLM API safui siwo wofi atsɔ awɔ fe gbogbo aɖewo alo ana ŋusẽ dɔ vɔ̃ɖi bubuwo.
  • Nyatakaka siwo nye ame ŋutɔ tɔ ƒe Bu: Zi geɖe la, nya ɣaɣlawo nɔa nuto ƒe tɔtrɔ siwo woɖe tso eme la me na nyatakakadzraɖoƒe ememetɔwo kple dɔwɔnawo, si ɖea asisiwo ƒe nyatakakawo kple nunya ƒe nunɔamesiwo ɖe go.
  • Dɔwɔwɔ ƒe Tɔtɔ: De dzesi, eɖeɖe, kple hayahaya tso nudzɔdzɔ sia tɔgbe me bia ɣeyiɣi geɖe na dɔwɔlawo eye wòtɔa te feature development.
  • Kakaɖedzi ƒe tsɔtsrɔ̃: Asitsalawo kple ezãlawo megaka ɖe wo dzi o ne wokpɔe be dɔwɔƒe aɖe ƒe mɔ̃ɖaŋununya ƒe ƒuƒoƒo nye nusi ŋu woate ŋu adze afɔku le.
ƒe nyawo

Esia tututu tae dɔwɔwɔ ƒe gɔmeɖoanyi si le dedie, si wɔ ɖeka le vevie wu. Wotu mɔ̃wo abe Mewayz ene kple dedienɔnɔ abe gɔmeɖose vevi ene, si naa nɔnɔme si dzi wokpɔna si me wokpɔa asitsatsa ƒe susu, nyatakakawo, kple ƒoƒo ɖekae dzi le ɖekawɔwɔ me, si ɖea alesi wòhiã be woatsɔ gotagome nusiwo dzi woanɔ te ɖo bɔbɔe ƒe ƒuƒoƒo aɖe aƒo ƒu ɖekae hena dɔwɔwɔ veviwo dzi kpɔtɔna.

Nusɔsrɔ̃ siwo wosrɔ̃ kple Stack si te ŋu nɔa te ɖe nɔnɔme sesẽwo nu wu tutu

Togbɔ be wode dzesi agbalẽvi vɔ̃ɖi la kabakaba eye woɖee ɖa hã la, nudzɔdzɔa gblẽ nusɔsrɔ̃ veviwo ɖi. Kakaɖedzi ŋkumaʋumaʋui na gotagome agbalẽviwo, tso beléle na wo ŋu siwo ŋu ŋkɔ le gɔ̃ hã gbɔ, nye afɔku gã aɖe. Ele be habɔbɔwo nawɔ kɔmpiutadziɖoɖowo ƒe dzadzɛnyenye sesẽ wu, siwo dometɔ aɖewoe nye:

Pinning dependency versions, wɔwɔ edziedzi ƒe agbalẽdzikpɔkpɔ, dɔwɔnuwo zazã atsɔ adzro afɔkuwo kple nuwɔna siwo mesɔ o me, kple ame ŋutɔ ƒe package nudzraɖoƒewo zazã kple dependencies siwo ŋu wodzro. Gawu la, wò dɔwɔƒe ƒe kɔmpiutadziɖoɖowo ƒe "amedzidzedze ƒe anyigba" dzi ɖeɖe kpɔtɔ nye nu vevitɔ. Esia bia be woaƒo dɔ veviwo nu ƒu ɖe mɔ̃ siwo le dedie, siwo woate ŋu awɔ le mɔ vovovowo nu la dzi. Modular Business OS abe Mewayz ene ɖea mɔ na dɔwɔƒewo be woatsɔ woƒe dɔwɔwɔwo, nyatakakawo, kple ame etɔ̃lia ƒe ƒoƒo ɖekae aɖo teƒe ɖeka le nɔnɔme si dzi woɖu me. Esia ɖea Python ƒe akpa ɖekaɖekawo kple ŋɔŋlɔdzesi siwo kpɔa dɔ veviwo gbɔ ƒe kaka dzi kpɔtɔna, si wɔnɛ be dedienɔnɔ dzikpɔkpɔ wɔa dɔ do ŋgɔ eye mewɔa nu boo aɖeke o.

💡 DID YOU KNOW?

Mewayz replaces 8+ business tools in one platform

CRM · Invoicing · HR · Projects · Booking · eCommerce · POS · Analytics. Free forever plan available.

Start Free →

Ŋgɔyiyi kple Ŋudzɔnɔnɔ kple Ðekawɔwɔ

LiteLLM ƒe nugblẽfexexe nye nyɔnyrɔ̃. Ne AI zazã le dzidzim ɖe edzi la, dɔwɔnu siwo naa ŋusẽe la ava zu taɖodzinu siwo ƒe nu léa dzi na ame geɖe wu. Dedienɔnɔ magate ŋu anye nusi ŋu wobu le emegbe si wotsɔ ga bla ɖe nusiwo dzi woate ŋu anɔ te ɖo le mɔ gbadza nu ƒe kadodo si mebɔbɔ o ŋu o. Asitsatsa ƒe dɔwɔna siwo te ŋu nɔa te ɖe nɔnɔme sesẽwo nu ƒe etsɔme le ɖoɖo siwo wowɔ ɖekae, siwo le dedie, afisiwo wowɔa dɔwɔwɔ kple dedienɔnɔ le ɖekae me. To nusɔsrɔ̃ tso nudzɔdzɔ siawo tɔgbe me eye wotia mɔ̃ siwo tsɔa dedienɔnɔ kple modular control ɖoa nɔƒe gbãtɔ—abe Mewayz ene—la, dɔwɔƒewo ate ŋu awɔ AI kple automation ƒe ŋusẽ ŋudɔ evɔ womatsɔ wo ɖokui ade kɔmpiutadziɖoɖowo ƒe kɔsɔkɔsɔ ƒe afɔku ɣaɣlawo me o.

ƒe nyawo

Nyabiase Siwo Wobiana Enuenu

LiteLLM Python Package Compromised: Ŋkuɖodzinya Vevi aɖe le Supply-Chain ƒe Afɔkuwo ŋu

Ecosystem si le ʋuʋu ɖi, si nye egbegbe kɔmpiuta dɔwɔɖoɖowo wɔwɔ ƒe mɔ̃ ŋutɔŋutɔ, dze nuzazãwo ƒe kɔsɔkɔsɔ ƒe amedzidzedze deŋgɔ aɖe dzi le kwasiɖa sia me. Wokpɔe be Python ƒe akpa xɔŋkɔ si nye LiteLLM, si nye agbalẽdzraɖoƒe si naa gbegbɔgblɔ gã ƒe kpɔɖeŋu (LLM) siwo wu 100 siwo tso OpenAI, Anthropic, kple bubuawo gbɔ ƒe ŋgɔdonya ɖeka la dzraa kɔpi vɔ̃ɖiwo ɖo. Nudzɔdzɔ sia, si na ŋɔdzinuwɔlawo tsɔ eƒe tɔtrɔ si ŋu woɖe mɔ ɖo (0.1.815) da ɖe Python Package Index (PyPI) me la, ɖo ƒutsotsoewo ɖe dɔwɔlawo ƒe habɔbɔa me, si te gbe ɖe kakaɖedzi si mebɔbɔ o si míetsɔna ɖoa míaƒe kɔmpiutadziɖoɖo siwo dzi míenɔa te ɖo dzi. Le asitsaha ɖesiaɖe si zãa AI dɔwɔnuwo gome la, menye taɖui dzro aɖe koe esia nye o—enye afɔku tẽ na dɔwɔwɔ ƒe dedienɔnɔ kple nyatakakawo ƒe blibonyenye.

Alesi Amedzidzedzea Dzɔe: Kakaɖedzi ƒe Gbegblẽ

Amedzidzedzea dze egɔme kple LiteLLM dzikpɔla aɖe ƒe ame ŋutɔ ƒe akɔntabubu ƒe asiɖeɖe le eŋu. Esi nuwɔla gbegblẽawo zã mɔnu sia tsɔ ta agbalẽvi la ƒe akpa yeye si me susu vɔ̃ɖi le. Wotrɔ asi le aʋatsokɔdasia ŋu be wòanye adzame eye woaɖo taɖodzinu na wo. Mɔnu aɖe si dzi woato aɖe nutoa me ƒe tɔtrɔ veviwo—abe API safuiwo, nyatakakadzraɖoƒe ƒe ɖaseɖigbalẽwo, kple ɖoɖowɔɖi ƒe nya ɣaɣlawo—tso ɖoɖo siwo me wodae ɖo la me ɖe eme. Vevietɔ la, wowɔ kɔda vɔ̃ɖi la be wòawɔ dɔ le mɔ̃ tɔxɛ siwo menye Windows tɔ o dzi le eɖoɖo ƒe akpaa me ko, eye anɔ eme be aƒo asa na dzedze gbãtɔ le numekuku ƒe sandbox siwo wowɔna le wo ɖokui si siwo zɔna zi geɖe le Windows nɔnɔmewo me.

Nusiwo Gɔmesese Kekeake na Asitsaha Siwo Wotsɔa AI ʋãna

Le dɔwɔƒe siwo tsɔa AI deŋgɔwo dea woƒe dɔwɔwɔ me gome la, amedzidzedze sia nye nudzɔdzɔ ŋuti numekuku si me wobua tame le. LiteLLM nye gɔmeɖoanyi dɔwɔnu na dɔwɔlawo le AI-ŋusẽ ƒe dɔwɔɖoɖowo tum, si wɔa dɔ abe tɔdzisasrã ene le woƒe kɔda kple LLM dɔwɔƒe vovovowo dome. Menye ɖeko sedzidada le afisia fia API safui si wofi ko o; ate ŋu akplɔ ame ayi:

Nusɔsrɔ̃ siwo wosrɔ̃ kple Stack si te ŋu nɔa te ɖe nɔnɔme sesẽwo nu wu tutu

Togbɔ be wode dzesi agbalẽvi vɔ̃ɖi la kabakaba eye woɖee ɖa hã la, nudzɔdzɔa gblẽ nusɔsrɔ̃ veviwo ɖi. Kakaɖedzi ŋkumaʋumaʋui na gotagome agbalẽviwo, tso beléle na wo ŋu siwo ŋu ŋkɔ le gɔ̃ hã gbɔ, nye afɔku gã aɖe. Ele be habɔbɔwo nawɔ kɔmpiutadziɖoɖowo ƒe dzadzɛnyenye sesẽ wu, siwo dometɔ aɖewoe nye:

Ŋgɔyiyi kple Ŋudzɔnɔnɔ kple Ðekawɔwɔ

LiteLLM ƒe nugblẽfexexe nye nyɔnyrɔ̃. Ne AI zazã le dzidzim ɖe edzi la, dɔwɔnu siwo naa ŋusẽe la ava zu taɖodzinu siwo ƒe nu léa dzi na ame geɖe wu. Dedienɔnɔ magate ŋu anye nusi ŋu wobu le emegbe si wotsɔ ga bla ɖe nusiwo dzi woate ŋu anɔ te ɖo le mɔ gbadza nu ƒe kadodo si mebɔbɔ o ŋu o. Asitsatsa ƒe dɔwɔna siwo te ŋu nɔa te ɖe nɔnɔme sesẽwo nu ƒe etsɔme le ɖoɖo siwo wowɔ ɖekae, siwo le dedie, afisiwo wowɔa dɔwɔwɔ kple dedienɔnɔ le ɖekae me. To nusɔsrɔ̃ tso nudzɔdzɔ siawo tɔgbe me eye wotia mɔ̃ siwo tsɔa dedienɔnɔ kple modular control ɖoa nɔƒe gbãtɔ—abe Mewayz ene—la, dɔwɔƒewo ate ŋu awɔ AI kple automation ƒe ŋusẽ ŋudɔ evɔ womatsɔ wo ɖokui ade kɔmpiutadziɖoɖowo ƒe kɔsɔkɔsɔ ƒe afɔku ɣaɣlawo me o.

Tsɔ Wò Dɔwɔƒea Naɖɔ Ðo kple Mewayz

Mewayz tsɔa asitsatsa ƒe modules 208 vaa mɔnu ɖeka dzi — CRM, fexexe, dɔa dzikpɔkpɔ, kple bubuwo. Wɔ ɖeka kple zãla 138,000+ siwo na woƒe dɔwɔwɔ le bɔbɔe.

Dze egɔme Femaxee Egbe →
ƒe nyawo

Try Mewayz Free

All-in-one platform for CRM, invoicing, projects, HR & more. No credit card required.

Start managing your business smarter today

Join 30,000+ businesses. Free forever plan · No credit card required.

Ready to put this into practice?

Join 30,000+ businesses using Mewayz. Free forever plan — no credit card required.

Start Free Trial →

Ready to take action?

Start your free Mewayz trial today

All-in-one business platform. No credit card required.

Start Free →

14-day free trial · No credit card · Cancel anytime