if we want to get all moralistic about this, my main objection to LLMs is that writing code should be fun for its own sake, so why would you ever want an LLM to write your code? don't you like fun?

the only reason to do that is because you're a wage slave at some corporate job and your boss wants you to be more efficient, and there you are slaving away, and using an LLM makes your boss happy.

but what's the real problem there? it's not the LLM, it's your boss. your boss is a cunt. corporations are cunts. the problem is wage slavery, not LLMs.

if we got rid of wage slavery, we'd probably also get rid of LLMs, but that doesn't mean LLMs are the root cause of this problem.

@fschulze @brettcannon This particular attack was an exfiltration of a long lived PyPI API key, with packages uploaded from a separate origin. If I understand correctly, there *was* a dev account compromise, but that was of the GitHub Action that was used to perform the key exfiltration (that is, trivy was compromised first, then used to attack LiteLLM et al).

Edit to link the specific analysis my understanding is based on: https://futuresearch.ai/blog/litellm-hack-were-you-one-of-the-47000/