Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (193)AI & LLMs (143)Backend & APIs (102)Web Development (90)ERP Systems (77)Security (65)Software Development (58)Career Reflections (29)Cloud (29)AI / Machine Learning (18)Product & SaaS (12)University (1)Hackathons (1)

SecurityOctober 202612 min read

Hugging Face Security Incident 2026: Treat Datasets as Code

A close reading of Hugging Face's July 2026 disclosure: a malicious dataset, a remote-code loader, config template injection, and the controls and rotation order that limit the damage.

SecurityOctober 202611 min read

Transformers trust_remote_code Vulnerability: CVE-2026-4372

CVE-2026-4372: a crafted config.json made transformers before 5.3.0 run Hub code with trust_remote_code off. What the fix changed, plus a loading checklist.

SecurityOctober 202611 min read

LiteLLM CVE-2026-42208: SQL Injection Fix and Gateway Hardening

How one unauthenticated Authorization header reached the LiteLLM database, what the advisory, Sysdig and CISA say, and the patch, detection and hardening steps to run now.

SecurityOctober 202612 min read

LiteLLM Supply Chain Attack: PyPI Dependency Cooldowns

Two LiteLLM releases hid credential-stealing malware on PyPI for 2h 32m. I read the incident reports to see which cooldown, hash and publisher controls would have mattered.

SecurityOctober 202612 min read

OpenSSF Model Signing: Sign and Verify ML Models With OMS

I read the OMS v1.0 spec, the model_signing README, NVIDIA's NGC post and a July 2026 paper to see what a detached Sigstore bundle covers and where enforcement is missing.

AI/MLOctober 202612 min read

KServe LLMInferenceService Guide: llm-d, WVA and vLLM

A close reading of KServe v0.17 and v0.18 LLMInferenceService: llm-d routing, WVA autoscaling, LeaderWorkerSet, and where it beats raw vLLM Deployments.

Showing 109–114 of 818 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications