A new supply chain attack called 'slopsquatting' exploits AI hallucinations by tricking developers into installing malicious packages that LLMs invent, with research across 500,000 code samples and 16…
An open-source Python CLI, git-translate-commits, enables developers to preview and normalize Git commit messages offline using a local translation engine, avoiding the privacy risks of external APIs.…
Baseten model performance engineer Michael Feil shipped Baseten Tokenizer, a Rust-backed package that cuts CPU time for preparing long prompts for Moonshot AI's Kimi K3 model, achieving up to 18x fast…
OpenAdapt, an open-source generative process automation tool, shipped an update to version 1.0+ with a modular meta-package architecture that provides a unified CLI and sub-packages via PyPI. The proj…
The Apache TVM community introduced TIRx, an open-source, hardware-native DSL and compiler for ML kernels that compiles to GPUs and specialized AI accelerators. TIRx targets fast-moving frontier kerne…
Agno claims its agent framework instantiates 529× faster than LangGraph and uses 24× less memory, based on a benchmark timing the construction of a one-tool agent 1,000 times. Independent testing conf…
GitHub made a three-day cooldown the default for Dependabot version updates on July 14, and PyPI began rejecting new files uploaded to releases older than 14 days on July 22, betting that patience bea…
Five major large language models (LLMs) — Claude, Codex, Gemini, and two others — consistently hallucinate the same 127 nonexistent Python and npm package names, according to researcher Aleksandr Chur…
A developer fixed a critical gap in their open-source video tool crv after a user reported that extracted frames lacked timestamps, making it impossible for an LLM to know when a slide appeared. The f…
Pyshackle, an open-source Python library, introduces a hard pre-execution gate for AI agent tool calls, requiring explicit user approval before any tool is executed. The project, available on PyPI, ai…
Roopam W Sure released CAGE-lite v0.1.2, an open-source Python implementation of the CAGE (Control, Assurance, and Governance Evaluation) framework that provides prebind assurance for AI agent actions…
Researcher Aleksandr Churilov found that five top AI coding tools—Claude Sonnet 4.6, Claude Haiku 4.5, GPT-5.4-mini, Gemini 2.5 Pro, and DeepSeek V3.2—hallucinate the same 127 nonexistent package name…
Biscuit, a native, extensible AI code editor under 20 MB, has been released on PyPI. The editor features AI agents with support for Gemini and Anthropic APIs, a planning agent with task tools, and an …
A developer built ModelFuzz, an open-source Python library that intercepts tool calls at the execution layer to prevent AI agents from leaking secrets via prompt injection. The library includes a CLI …
The `irm | iex` PowerShell pattern, used by major projects like Bun and the Hugging Face CLI to install software, creates a security blind spot by executing remote code directly in memory without revi…
AgentNest, an open-source runtime for secure AI agent execution, provides self-hosted sandboxes with disposable, policy-controlled environments for Python, shell commands, files, packages, browsers, G…
BrassCoders, a security scanner designed to catch what AI assistants structurally miss, integrates into developer workflows through three checkpoints: a local CLI install, a pre-commit hook, and a CI …
Veracium, a provenance-aware memory plug-in for agentic systems, launches to resist injection and confabulation failures in naive agent memory by storing third-party claims as structurally quarantined…
SerpApi released an open-source plugin for Nous Research's Hermes Agent that adds dedicated tools for local places, news, and product research via SerpApi's search engines. The plugin, available on Py…
A developer released ckg-agentforce, an open-source tool that represents Salesforce AgentForce as a traversable knowledge graph with 40 nodes and 52 edges, enabling deterministic, auditable answers ab…