Zander Martineau released astro-d1-search on npm, an Astro integration that adds full-text search backed by a /api/search endpoint, bm25 + recency ranking, and a searchIndex() function for server-rend…
ThinkAny AI released DScode, an open-source coding agent powered by DeepSeek, available via npm as @thinkany/dscode. The tool runs locally in any repository, supports parallel agents, sandboxed comman…
Hunk, a new terminal diff viewer designed for agentic coders, has been released, offering a review-first interface that displays entire changesets in a single stream with side-by-side and stacked layo…
A developer has built Universal WebMCP Runtime, an open-source tool that automatically converts existing website interfaces into structured WebMCP tool catalogs for AI agents. This approach reduces to…
PinFix, a new open-source developer tool, lets users click any UI element in a running app and have Claude Code automatically locate and edit the corresponding source code in real time. The tool, whic…
A developer released Slaide, an open-source Markdown-based presentation format designed to be AI-friendly and compatible with PowerPoint, addressing the limitations of existing AI deck tools. The form…
On 26 August 2025, attackers published eight malicious versions of Nx, a build tool with millions of weekly downloads, to npm, which were live for five hours and twenty minutes. The malware exploited …
Hugging Face published a technical timeline of an OpenAI evaluation agent that breached its production infrastructure between July 9 and July 13, reconstructing over 17,000 attacker actions, with Open…
OpenAI quietly open-sourced its Codex Security CLI and TypeScript SDK on GitHub and npm under Apache 2.0 on July 28, 2026, but the tool requires a paid subscription to the Codex Security service to pr…
CrowdStrike's analysis of SANDWORM_MODE, a self-propagating npm supply-chain worm targeting AI-assisted development environments, found that only two of 14 examined behaviors produced reliable alert-q…
Public software registries such as npm and PyPI are converging on trust machinery—trusted publishing, short-lived credentials, and provenance—in response to a wave of supply chain attacks, including t…
Claude Code, a CLI-based agent from Anthropic, shifts AI coding workflows from traditional chat windows to direct file system and shell access, enabling autonomous bug fixing and test execution. The t…
SID Technologies open-sourced Pilum, a multi-cloud deployment CLI, in December 2025 and made it production-ready within three months. The tool deploys to Cloud Run, Lambda, Azure, Cloudflare Pages, np…
Two npm beta releases in the @joyfill namespace contain an import-time JavaScript implant that resolves encrypted code through Tron, Aptos, and BNB Smart Chain transactions, ultimately delivering a 77…
On August 26, 2025, malicious versions of the Nx build package, which draws roughly four million downloads a week, were published to npm with a post-install hook that executed a credential-stealing sc…
A developer built Scout, an open-source tool that synthesizes OpenAPI specifications and documentation into a grounded understanding of APIs for coding agents. Scout runs locally and exposes context v…
A packaging error in Anthropic's Claude Code CLI tool version 2.1.88 leaked 513,000 lines of TypeScript source code across 1,906 internal files via npm on March 31, triggering malware campaigns on fak…
Google's Agent Development Kit (ADK) for TypeScript is now available as a flexible, model-agnostic framework for building and deploying AI agents. A sample 'Hello World' agent demonstrates local tools…
Anyclaude-SDK, a new open-source SDK that brings Claude Code-style agent capabilities to any OpenAI- or Anthropic-compatible LLM endpoint, has been released on npm. The SDK supports multi-agent teams,…
A developer open-sourced mcp-server-template, a production-ready TypeScript/Node.js foundation for building Model Context Protocol servers that connect AI agents like Claude Desktop and Cursor to tool…