Jyunmi Hatcher

So it's well beyond just one company, right?

So LightLLM is an open source API gateway that lets developers connect their applications over a hundred different large language model providers.

So including OpenAI, Anthropic, Google, and others.

Through a single interface,

It's downloaded 97 times per month on PYPI, the main Python package repository.

And the hacking group called Team PCP compromised the Trivi vulnerability scanner through a misconfigured GitHub repository.

actions workflow so what this means is they're also they're finding exploits within github and if you're not familiar github is like the number one platform for repositories of software projects of every type so identifying that there are um

There are exploits there as well is another concerning issue about the larger supply chain of software, LLMs, and AI development.

So a bit of a concerning story there.

weaved off of the anthropic leak itself.

So it's not the best for AI security or cybersecurity in general over the last few days.

Okay.

So a lot of quantum to unpack.

So I'll try and work back from what I'm trying to keep in my brain with this.

Okay.

So the more you get, the faster it recharges.

Collective effects.

That's right.

Collective effects.

All right.