Hugging Face automated its weekly huggingface_hub releases using a GitHub Actions workflow with open-source tools and open-weights AI models, keeping a human in the loop for release notes and announce…
Matrix Scroll is an open-source tool that attaches signed provenance envelopes to Git commits, recording whether a human or an AI agent authored the change. It enables offline verification of commit a…
New research reveals that AI models do not invent fake names at random but often converge on the same plausible lies, creating a security and compliance risk. Studies found that code-generating LLMs h…
Microsoft's Defender Security Research Team disclosed AutoJack on June 18, 2026, a chained exploit that achieves host-level remote code execution via AI browsing agents in AutoGen Studio pre-release b…
Microsoft disclosed AutoJack on June 18, a three-vulnerability chain in AutoGen Studio that lets a single malicious web page execute arbitrary code on the host running an AI agent, without requiring u…
Microsoft researchers detailed an exploit chain called AutoJack that turns an AI browsing agent into a delivery vehicle for remote code execution. The flaw sits in AutoGen Studio, the open-source prot…
Generative AI coding assistants are making programming language popularity less relevant, as tools like Claude Code can work with older languages like Perl if sufficient documentation exists. The auth…
Meta released Pyrefly 1.0, a fast Python linter and type checker for PyTorch and Django projects. Python 3.15 introduces a sampling profiler for efficient code instrumentation. A new malware called Ha…
A developer released Avera, an open-source tool that deterministically detects introduced regressions by comparing baseline and current test runs, blocking releases only when a previously passing test…
Developer xyTom released Coding Tools MCP, an open-source runtime server that exposes local coding primitives like file search, patch application, and test execution to any MCP-compatible LLM agent. T…
Eidetic Works launched a Pro tier for its AI agent memory platform, offering persistent context across sessions, tools, and machines via the nucleus_ask MCP tool. The service syncs to the user's own C…
Vstorm, an Applied Agentic AI Engineering Consultancy, embedded AGENTS.md auto-generation into its open source agentic AI project template, ensuring every FastAPI + Next.js project ships with tailored…
Socket Security researchers discovered that malicious PyPI packages in the Hades wave of the Mini Shai-Hulud/Miasma supply chain campaign embed fake CBRN-themed text in JavaScript block comments to tr…
Attackers are increasingly targeting developer endpoints to steal credentials, as demonstrated by supply chain attacks like Megalodon, TrapDoor, and Miasma. GitGuardian's new Developer Endpoint Protec…
A developer built a Docker MCP server with 50 tools after finding 11 existing packages fragmented across different licenses and feature sets. The server, which has achieved over 3,042 weekly downloads…
Trent AI learned three MCP server design principles after shipping a public-facing server consumed by third-party agents. The team consolidated tools from 17 to 11, enforced consistent naming across s…
Hextrap launched a package firewall that proxies pip, npm, go get, and cargo installs through managed allow/deny lists, OPA policies, and safeguards like soak time and typosquatting detection. The too…
A developer built a safe math expression interpreter for Python that avoids eval(), using a tokenizer, recursive-descent parser, AST, and linear equation solver. The engine uses decimal.Decimal for ex…
GitHits launched its public beta 0.9, a CLI and local MCP server that gives coding agents access to open-source code behind project dependencies. The tool indexes open-source code and documentation, a…
A malicious PyPI package named 'ColorLib' was discovered targeting developers with info-stealing malware that exfiltrates environment variables, cryptocurrency wallet details, and credentials. OWASP r…