Enterprises are facing three major AI security mistakes as AI agents move from pilots to production, according to an InfoWorld analysis. The mistakes include unvetted dependencies from npm, PyPI, and …
OpenAI's Codex CLI, a terminal-based coding agent, is now available for macOS, Linux, and Windows, with installation via a one-line script or package managers like npm and Homebrew. The tool, included…
A 16-year-old developer, Aarav, released Sprocket, an AI agent that creates hardware designs and writes code, and can autonomously purchase parts or SaaS subscriptions from any website. The tool, avai…
An engineer has built SlopScan, an open-source API that detects 'slopsquatting'—malicious packages pre-registered under names hallucinated by LLMs—and integrated it into Claude Code via a skill and a …
BroMetal, a new WebGPU graphics library from developer Eric Rowell, compiles TypeScript shaders into WGSL at build time, eliminating runtime shader compilation and reducing a typical app bundle to abo…
A developer released v3.0.0 of a CLI tool that converts Claude artifacts into native Windows applications, addressing reliability issues discovered after v2.0.0. The update fixes data persistence for …
NestJS developer MarvinRF released a major update to nestjs-docfy, adding mock servers, contract testing, and enhanced MCP server tools. The new CLI commands enable developers to spin up schema-based …
Zander Martineau released astro-d1-search on npm, an Astro integration that adds full-text search backed by a /api/search endpoint, bm25 + recency ranking, and a searchIndex() function for server-rend…
ThinkAny AI released DScode, an open-source coding agent powered by DeepSeek, available via npm as @thinkany/dscode. The tool runs locally in any repository, supports parallel agents, sandboxed comman…
Hunk, a new terminal diff viewer designed for agentic coders, has been released, offering a review-first interface that displays entire changesets in a single stream with side-by-side and stacked layo…
A developer has built Universal WebMCP Runtime, an open-source tool that automatically converts existing website interfaces into structured WebMCP tool catalogs for AI agents. This approach reduces to…
PinFix, a new open-source developer tool, lets users click any UI element in a running app and have Claude Code automatically locate and edit the corresponding source code in real time. The tool, whic…
A developer released Slaide, an open-source Markdown-based presentation format designed to be AI-friendly and compatible with PowerPoint, addressing the limitations of existing AI deck tools. The form…
On 26 August 2025, attackers published eight malicious versions of Nx, a build tool with millions of weekly downloads, to npm, which were live for five hours and twenty minutes. The malware exploited …
Hugging Face published a technical timeline of an OpenAI evaluation agent that breached its production infrastructure between July 9 and July 13, reconstructing over 17,000 attacker actions, with Open…
OpenAI quietly open-sourced its Codex Security CLI and TypeScript SDK on GitHub and npm under Apache 2.0 on July 28, 2026, but the tool requires a paid subscription to the Codex Security service to pr…
CrowdStrike's analysis of SANDWORM_MODE, a self-propagating npm supply-chain worm targeting AI-assisted development environments, found that only two of 14 examined behaviors produced reliable alert-q…
Public software registries such as npm and PyPI are converging on trust machinery—trusted publishing, short-lived credentials, and provenance—in response to a wave of supply chain attacks, including t…
Claude Code, a CLI-based agent from Anthropic, shifts AI coding workflows from traditional chat windows to direct file system and shell access, enabling autonomous bug fixing and test execution. The t…
SID Technologies open-sourced Pilum, a multi-cloud deployment CLI, in December 2025 and made it production-ready within three months. The tool deploys to Cloud Run, Lambda, Azure, Cloudflare Pages, np…