Find published dossiers by topic, company, product or technology.

Showing 241–260 of 532 dossiers

LiteLLM 1.107.0 was backdoored on PyPI and Docker: startup hooks stole credentials even without an import

The unusual risk is that Python startup hooks execute without an application importing LiteLLM, while the public source tag lacked the malicious files. Check the exact installed wheel or image digest, not just the repository.

incident.io has made autonomous incident investigations generally available

Investigations has crossed from preview into production and incident.io now reports a large latency improvement in its own measured workflow. The agent continuously reassesses evidence and can hand remediation to coding agents, but the new speed and accuracy figures remain vendor-produced rather than independent.

ZCode uploaded local repositories without consent — then Z.ai open-sourced the client after the backlash

The useful lesson is broader than one coding assistant: repository indexing can quietly become a data-export boundary. ZCode’s response improves inspectability going forward, but builders using AI coding tools still need to know exactly which indexing, wiki and memory features send source code or Git metadata off-device.

GitHub rewrote Copilot’s 800,000-line agent runtime in Rust with agents doing most of the coding

The useful part is not the 800,000-line headline. GitHub has published unusually detailed receipts for a production-scale agent-assisted migration: roughly $120,000 of token spend, 14.5 weeks of incremental releases, dozens of regressions, extensive compatibility tests and a workload-specific jump from 7.55 to 120 session lifecycles per second.