SANDWORM_MODE

CrowdStrike's analysis of SANDWORM_MODE, a self-propagating npm supply-chain worm targeting AI-assisted development environments, found that only two of 14 examined behaviors produced reliable alert-q…

SpaceXAI open-sourced its entire 844,530-line Grok Build Rust codebase 72 hours after security researcher Cereblab demonstrated that the AI agent exfiltrated 5.1GB of data from an 11.2GB repository — …

A sophisticated multi-stage npm supply chain worm called SANDWORM_MODE was discovered in early 2026, targeting AI-augmented development environments like GitHub Copilot and Cursor. The worm exploits i…