Blog
I write about web development, software engineering, and building products. Sharing what I learn along the way. In total, I've written 4 articles on my blog. Use the search below to filter by title.
Most Popular
A Weekend Challenge, a Colab Surprise, and an Honest 60%: Building AgriScout
An offline cassava-disease scouting app for researchers and enumerators, and what I learned about not fooling myself.
Bitwarden CLI 2026.4.0 Supply Chain Attack
Malicious @bitwarden/[email protected] package compromised via hijacked GitHub Action, exfiltrating secrets in the TeamPCP/Checkmarx campaign.
CRITICAL: Severe Supply Chain Attack in LiteLLM PyPI Package Steals Developer Credentials
A highly sophisticated supply chain attack compromised the popular litellm PyPI package. Malicious versions (1.82.7 and 1.82.8) were published via a hijacked maintainer account and contained a multi-stage credential stealer. Version 1.82.8 utilized a .pth file to automatically execute the malware upon Python interpreter initialization, bypassing the need for an explicit import. Affected users must assume complete environment compromise and initiate immediate credential rotation.