🎟️ Got my ticket for the new home for #buildinpublic.
X is shutting down Communities on May 30. Come with me: buildinpublic.com/?ref=lande…
Fabian retweeted
We made a fake repo with fake bounties, and the bots are applying fake PRs, so we know who is fake, and we can ban them from the Coolify repo.
IQ over 1000
Fabian retweeted
Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
I'm not the only one doing this.
- karpathy
best thought leader, best person to learn from imo. Nanochat is the best way to get into training LLMs its the simplest and most digestible source for building your first AI model
- steipete
This guys GitHub is a national treasure, his writing is also very strong. Peekaboo, summarize.sh, openclaw, oracle, just talk to it, etc.. all unique and very useful
- badlogicgames
Mario’s Pi is a staple AI engine and possibly the best, simplest, open source agentic loop to learn from. Despite what people say about his methods, I think he’s going to set some new standards for Open source contribution. Big respect.
- TheAhmadOsman
This man is the GPU king, giveaways and lots of dense educational content around self hosting and home inference. He’s also tight with pretty much all the open weight labs and has them on for interviews regularly
- sudoingX
This is an up and comer who will change the game, he's pushing the limits of what a single gpu can do
- Ex0byt
I can confidently say this man will be fundamental in making local inference on massive models possible.
- alexinexxx
I genuinely feel motivated by her drive. She’s a real hard worker learning about GPU kernel programming. Also good aesthetics
- gospaceport
I would not have gotten into building my own hardware without this man’s hard work. He’s taught me so much about hardware and the economics of this. He also has the most impressive homelabs I’ve ever seen.
- alexocheema
The founder of Exolabs, pioneering Apple hardware inference, he’s also very engaged in the community and a good guy all around. If you are interested in Mac minis and Mac Studios this is your guys.
- nummanali
This guy is so prolific, he’s made tons of CLI tools for managing llm subscription budgets, using Claude code with alternative models etc..
- thdxr
The entire Opencode team is wonderful but Dax specifically is a good writer. More anti-doomer content to sooth your anxieties.
- juliarturc
If you are interested in the science, Julias channel is where it’s at. Almost everything I’ve learned about LLM compression has been from her.
- Teknium
The Nous research & Prime intellect teams are both some of the most hard-working and principled people around. Tough fight in an industry so aggressive.
- victormustar
Head of Product for Huggingface, enabling us all to publish our work.
- louszbd
Head of community at ZAI some of the top LLMs available right now that are open weights. They supercharged the movement
- SkylerMiao7
Making frontier intelligence fit on 10k USD of hardware. Via MiniMax
- crystalsssup
Building the best Open Weight model on the market, and releasing their latest research before their next gen model.
Believe it or not these people are carrying the entire industry and giving us a fighting chance.
Fabian retweeted
I, too, made the mistake of *checks notes* taking OpenAI's charitable mission seriously and literally.
In return, got a knock at my door in Oklahoma with a demand for every text/email/document that, in the "broadest sense permitted," relates to OpenAI's governance and investors.
Experts fired by Trump revive popular climate website p.dw.com/p/50Ozm?maca=en-Twi…


















