Cloudsmith

Lingering tickets and templated responses don't help you move faster. Cloudsmith gives you expert support from people who work with you to solve problems and improve performance. See how →

LiteLLM has suffered another dangerous breach (https://lnkd.in/eBCim6Bx) that allowed attackers to publish a malicious version to PyPI. This one does really bad stuff, like credential theft and remote code execution tools. If you use Cloudsmith and you use our cooldown (https://lnkd.in/en9kaJhj) and malicious package policies (https://lnkd.in/ep5-rabp), you’re safe - we blocked the bad package from getting to your developers, AI agents, and build pipelines. We wrote up a detailed blog explaining this attack (https://lnkd.in/euWG-w45), which is scary because LiteLLM is really popular on PyPI and Docker Hub (23 million downloads a week).

AI can hallucinate package names that attackers can exploit. Block malicious or suspicious dependencies before they reach your environment with policy enforcement at the artifact registry. See how →

Go beyond simply identifying vulnerabilities. Cloudsmith gives security teams the data and controls they need to assess risk, enforce policies, and make safer package decisions. Talk to an expert about Cloudsmith →

Spend less time managing infrastructure and more time shipping software. Cloudsmith handles the updates, patching, and scaling for you. See what cloud-native artifact management looks like →

Tired of fragmented tooling and neglected systems? Cloudsmith brings infrastructure, governance, and security together in one place. See what’s possible →