This desktop app for hosting and running LLMs locally is rough in a few spots, but still useful right out of the box.

Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.