Mar 26, 2026 · Information Security

How to Defend Against PyPI and Docker Hub Supply‑Chain Attacks with Cloud‑Native API Gateways

The article analyzes recent supply‑chain poisoning of the LiteLLM PyPI package and Docker Hub images, explains why PyPI is an attractive attack vector, and details a three‑layer defense using Alibaba Cloud's cloud‑native API Gateway—including KMS‑encrypted credentials, WAF traffic filtering, and Wasm sandbox plugins—to protect the software supply chain.

API GatewayKMSPyPI poisoning

0 likes · 11 min read

How to Defend Against PyPI and Docker Hub Supply‑Chain Attacks with Cloud‑Native API Gateways

Thought Artisan

Jan 19, 2026 · Industry Insights

Three Evolution Paths for Deterministic Software in the AI Agent Era

The article outlines three evolution directions for deterministic software: AI-friendly interaction redesign (UI/API for agents), runtime optimizations for inference engines, and adding adaptiveness via AI calls within secure sandboxes, noting architecture changes will be incremental via protocol-based adaptation layers.

A2A protocolAI-friendly softwareAgent Architecture

0 likes · 4 min read

Three Evolution Paths for Deterministic Software in the AI Agent Era