Vinmay

@vinmaynair

Coder. Music lover. Movie freak. Chelsea Fan. Building tools for AI safety. A good guy, still trying to finish first.

USA

github.com/vinmay

Joined April 2011

247 Following

98 Followers

Replies Reposts Media

Pinned
Vinmay
@vinmaynair
Mar 11
One of the 50 MCP servers I scanned gives the LLM a full Python shell on your machine. The tool: execute_blender_code. No builtin restriction on exec(). Imports, file reads, subprocess — all work. That's what I built reachscan to find 🧵 github.com/vinmay/reachsc…
7
Vinmay
@vinmaynair
Oct 24
Trying to get my AI agents to skip tool calls they don't need. A 270M Gemma model I fine-tuned cut calls from 18 to 6 on math and code tasks, with nothing lost. Biggest lesson was that whether a tool is needed depends on the model dev.to/vinmay/i-tried… #AIAgents @googlegemma
I tried to make my AI agents lazier with a 270M model. It backfired on the smartest one.
From dev.to
1
Vinmay
@vinmaynair
May 24
@Google what do you mean his height is "hello world"? Did we let a placeholder string get into prod?
Charlotte FC
Vinmay
@vinmaynair
Mar 24
litellm 1.82.8 ran a credential stealer on every Python startup. No import needed. 97M downloads/month. Spreads through transitive deps. Was caught by luck. Wrote a breakdown + what to actually do about it #DEVCommunity
dev.to
Your `pip install` Just Stole Your SSH Keys: The LiteLLM Supply Chain Attack Explained
A single pip install litellm==1.82.8 was enough to drain everything off your machine. No suspicious...
Vinmay
@vinmaynair
Mar 24
PSA for every AI builder using litellm: v1.82.8 on PyPI is a confirmed supply chain attack. No import needed — a .pth file runs a credential stealer on every Python startup. SSH keys, cloud creds, env vars, wallets. All exfiltrated. Rotate everything. 🔗
[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 — credential stealer · Issue...
From github.com

Vinmay

Vinmay’s posts