Seth Larson

GitHub made a three-day cooldown the default for Dependabot version updates on July 14, and PyPI began rejecting new files uploaded to releases older than 14 days on July 22, betting that patience bea…

On February 17, 2026, attackers compromised the Cline AI coding tool via a malicious npm package, silently installing OpenClaw on 4,000 developers' machines through a postinstall script. This "slopsqu…

Python Software Foundation security developer Seth Larson reported that JetBrains' PyCharm IDE Full Line Code Completion plugin suggests code containing severe vulnerabilities, but JetBrains declined …