Software Engineering Daily

SED News: OpenCode, AI Code vs. Shipped Code, and the LiteLLM Breach

17 snips
Apr 2, 2026
They discuss ARM’s comeback as CPUs become viable local AI compute for agentic workloads. A supply-chain compromise in LiteLLM that leaked API credentials is explored. The rise of OpenCode as an open-source coding alternative is covered. Tensions between Anthropic and OpenAI over Pentagon deals and enterprise positioning are examined. Hacker News curiosities like Doom over DNS and a salvaged Tesla computer are highlighted.
Ask episode
AI Snips
Chapters
Books
Transcript
Episode notes
INSIGHT

Dependencies Can Leak LLM API Keys At Scale

  • Supply chain attacks now target LLM API keys embedded in developer tooling, raising both theft and abuse risks.
  • Gregor Vand and Sean Falconer discuss LiteLLM compromise that extracted thousands of API credentials via a dependency takeover.
INSIGHT

Open Source Agentic Coding Tools Are Gaining Traction

  • OpenCode and other open-source agentic dev tools are rising as free/local alternatives to paid cloud options.
  • Gregor Vand notes trade-offs: OpenCode uses ~1GB RAM, heavy TypeScript, while Codex variants use Rust for speed.
INSIGHT

Anthropic Versus OpenAI Is A Market Positioning Moment

  • The Pentagon contract spat exposed divergent vendor positioning: Anthropic emphasizes restraint and enterprise trust while OpenAI appears open to government use.
  • Gregor Vand says Anthropic refused clauses allowing surveillance/autonomy, costing the contract.
Get the Snipd Podcast app to discover more snips from this episode
Get the app