A single unsigned commit to the `icflorescu/mantine-datatable` repository added six files, five of which serve as launchers that execute a 4.3 MB dropper at `.github/setup.js`. The dropper, obfuscated…
Moonshot AI has released Kimi Code CLI, an open-source, MIT-licensed terminal-based AI coding agent written in TypeScript that can read and edit code, run shell commands, and fetch web pages. The tool…
A developer has published Throughline, a hook plugin for Claude Code that offloads tool I/O to SQLite to reduce token consumption. In a 50-turn session, the plugin reduced context from 125,000 tokens …
On June 3, 2026, attackers pushed malicious commits to the GitHub repository `icflorescu/mantine-datatable` and four sibling repos, planting a 4.3 MB payload from the Miasma worm family. The commit ad…
Llm-cli-gateway 2.0.0, released June 4, 2026, eliminates a major supply-chain vulnerability by replacing the `better-sqlite3` native module with Node's built-in `node:sqlite` driver. The change remove…
A malicious npm package posing as a remote web UI tool for OpenAI Codex has been discovered in a supply-chain attack, exfiltrating authentication tokens from developers. The package, "codexui-android,…
A self-spreading npm worm called Miasma v2 compromised 57 packages across 286+ malicious versions by using a malicious binding.gyp file to trigger arbitrary code execution during npm install, without …
A developer has identified a new class of supply-chain attack called the "MCP rug pull," where malicious Model Context Protocol (MCP) servers dynamically change their tool surfaces between sessions wh…
Paseo has launched as an open-source coding agent interface that unifies Claude Code, Codex, Copilot, OpenCode, and Pi agents into a single platform with desktop, mobile, and CLI access. The self-host…
OpenPress, an open-source framework for fixed-layout document creation, has been published on npm as `@open-press/cli` and `@open-press/core`. The framework separates creative decision-making from pre…
A malicious npm package called codexui-android, disguised as a legitimate remote user interface for OpenAI Codex, exfiltrated developer authentication tokens by hiding malicious code in the published …
Google released a new Google Workspace CLI tool that provides a unified command-line interface for Drive, Gmail, Calendar, Sheets, Docs, Chat, and Admin APIs. Written in Rust, the tool dynamically gen…
On June 1, 2026, an attacker exploited npm's trusted publishing mechanism to compromise 32 @redhat-cloud-services packages across 96 versions, injecting malicious preinstall hooks that execute a Bun-b…
Mitchell Hashimoto is advising developers to stop updating software dependencies and instead fork and trim libraries, updating only when user-facing issues arise. The recommendation follows a spring o…
A developer released mitmwall, an egress Web Application Firewall for Ubuntu that uses iptables and mitmproxy to block all outbound HTTP(S) traffic except explicitly allowed routes. The tool prevents …
The developer behind .klickd has released version 4.1 of the portable, encrypted memory system for AI workflows, addressing the problem of disposable memory that resets between sessions. The open-sour…
Attackers are exploiting AI hallucinations to generate references to malicious npm packages, tricking developers into installing compromised code. The technique goes beyond passive AI errors, as threa…
A malicious npm package named codexui-android, which amassed roughly 27,000 weekly downloads, secretly exfiltrated OpenAI Codex authentication tokens by sending the contents of users' auth.json files …
Gergely Orosz reports that AI is amplifying team culture for better or worse, while Cloudflare demonstrates frontier models chaining exploits and outperforming single-agent verification in security re…
The MCP Registry, launched in September 2025 as a community-driven catalog of MCP servers, exposes a REST API at `registry.modelcontextprotocol.io/docs` that allows AI agents to dynamically discover t…