# python

Popular AI library LiteLLM was hit with a malicious backdoor — just installing it could trigger credential theft of SSH keys, cloud tokens, and crypto wallets.

LiteLLM hit by supply chain attack — pip install was enough to steal all credentials. Karpathy warns about dependency tree risks and advocates using LLMs to yoink functionality instead of adding more deps.

Karpathy's 'art project': a GPT model in 243 lines of pure Python, zero dependencies. Every operation uses atomic math (add, mult, exp, log). Efficiency is secondary. It's the nand2tetris for AI education.

Armin Ronacher (creator of Flask, Jinja2, CTO of Sentry) argues current programming languages were designed for 'humans who type slowly.' The AI agent era has different needs. He details what agents love/hate, and why Go accidentally became the winner of the agentic coding era.