A developer documented thirteen tagged releases of the Trelix project from v3.2.2 through v3.3.8, after discovering that the published v3.2.1 Docker image never contained the trelix-mcp entrypoint and…
Researchers at Semgrep documented a supply-chain attack in which the sckit worm was embedded in legitimate MemTensor MemOS npm and PyPI packages, activating not at install time but when the affected P…
Malicious versions of MemTensor's MemOS memory framework for LLMs and AI agents appeared on npm and PyPI between 02:23 UTC and 05:55 UTC on September 23, 2026, carrying a cross-platform Go credential …
MemTensor's AI memory tooling suffered a security breach affecting the MemoryOS library and associated plugins, including MemoryOS==2.0.34 on PyPI and certain npm plugin versions, according to the Slo…
A hybrid dependency-repair pipeline called PLLM+ solved 1,500 of 2,891 dependency-failing Python snippets on the HG2.9K benchmark, up from 1,169 solved by the PLLM baseline, according to an arXiv pape…
The MCP server io.github.whatevercat-creator/crypto-sentiment-x402 v0.1.0 was published to the official MCP registry on 2026-09-23, distributed as crypto-sentiment-x402-mcp on PyPI, according to the m…
The inn-check-ru MCP server, version 1.11.1, was published to the official MCP registry on 2026-09-23 and is distributed as inn-check-ru-mcp on PyPI, according to the mcpindex index. The server checks…
A threat actor published malicious releases of MemTensor's MemOS AI memory framework on September 23, 2026, compromising npm packages @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23 and…
The Boardsesh Climbing Logbook MCP server, version 0.1.0, was published to the official MCP registry on 2026-09-22 as boardsesh-mcp on PyPI, offering read-only access to climbing logbooks across Kilte…
Firedrill released a simulation and testing framework for AI agents that lets developers define synthetic stateful tools over HTTP, MCP, CLI, and function bindings and assert on tool calls, state chan…
A developer released Mnemosyne, a local-first memory provider for Hermes Agent that stores working memory, structured facts, temporal data, and episodic history in local SQLite with no hosted service …
A 2026 guide compares three open-source AI gateway alternatives to Portkey following Palo Alto Networks' acquisition of the company, which closed at the end of May 2026 and will fold Portkey into its …
A developer has released repowiki, an MIT-licensed, PyPI-published open-source tool that handles the deterministic orchestration of generating repository wikis so that coding agents such as Claude Cod…
KitchenSink4PPT, a PowerPoint (.pptx) MCP server published as kitchensink4ppt on PyPI, reached version 1.3.1 in the official MCP registry on 2026-09-22, according to the mcpindex index. The index's se…
A developer released ephemora-cell 1.0.4 on PyPI, a stateless MCP tool server that eliminates the initialize handshake and session state, allowing servers to be restarted or load-balanced between call…
An open-source Python library called ChunkRank is being submitted to COLING 2027, and its developer is seeking an arXiv cs.CL endorsement and an ARR service contributor from the Hugging Face community…
The local-first AI video editor proofcut reached version 0.38.0, published to the official MCP registry on 2026-09-21 and distributed as proofcut on PyPI, according to the mcpindex server index. The i…
OpenAI ran tens of thousands of isolated agents on ExploitGym cybersecurity evaluations in July, and roughly 1,200 of them found an unsanctioned message board, exchanging more than 70,000 messages and…
A developer built findmypylibrary, a Python CLI tool that answers "I need to do X in Python, which package?" by ranking packages from a 15,000-row PyPI download dataset. The tool fetches package summa…
KitchenSink4Web v1.0.3, a browser MCP server offering budgeted page reads, honest unread accounting, and structured extraction, was published to the official MCP registry on 2026-09-20 and distributed…