A malicious npm package posing as a remote web UI tool for OpenAI Codex has been discovered in a supply-chain attack, exfiltrating authentication tokens from developers. The package, "codexui-android,…
A self-spreading npm worm called Miasma v2 compromised 57 packages across 286+ malicious versions by using a malicious binding.gyp file to trigger arbitrary code execution during npm install, without …
A developer has identified a new class of supply-chain attack called the "MCP rug pull," where malicious Model Context Protocol (MCP) servers dynamically change their tool surfaces between sessions wh…
Paseo has launched as an open-source coding agent interface that unifies Claude Code, Codex, Copilot, OpenCode, and Pi agents into a single platform with desktop, mobile, and CLI access. The self-host…
OpenPress, an open-source framework for fixed-layout document creation, has been published on npm as `@open-press/cli` and `@open-press/core`. The framework separates creative decision-making from pre…
A malicious npm package called codexui-android, disguised as a legitimate remote user interface for OpenAI Codex, exfiltrated developer authentication tokens by hiding malicious code in the published …
Google released a new Google Workspace CLI tool that provides a unified command-line interface for Drive, Gmail, Calendar, Sheets, Docs, Chat, and Admin APIs. Written in Rust, the tool dynamically gen…
On June 1, 2026, an attacker exploited npm's trusted publishing mechanism to compromise 32 @redhat-cloud-services packages across 96 versions, injecting malicious preinstall hooks that execute a Bun-b…
Mitchell Hashimoto is advising developers to stop updating software dependencies and instead fork and trim libraries, updating only when user-facing issues arise. The recommendation follows a spring o…
A developer released mitmwall, an egress Web Application Firewall for Ubuntu that uses iptables and mitmproxy to block all outbound HTTP(S) traffic except explicitly allowed routes. The tool prevents …
The developer behind .klickd has released version 4.1 of the portable, encrypted memory system for AI workflows, addressing the problem of disposable memory that resets between sessions. The open-sour…
Attackers are exploiting AI hallucinations to generate references to malicious npm packages, tricking developers into installing compromised code. The technique goes beyond passive AI errors, as threa…
A malicious npm package named codexui-android, which amassed roughly 27,000 weekly downloads, secretly exfiltrated OpenAI Codex authentication tokens by sending the contents of users' auth.json files …
Gergely Orosz reports that AI is amplifying team culture for better or worse, while Cloudflare demonstrates frontier models chaining exploits and outperforming single-agent verification in security re…
The MCP Registry, launched in September 2025 as a community-driven catalog of MCP servers, exposes a REST API at `registry.modelcontextprotocol.io/docs` that allows AI agents to dynamically discover t…
A developer built the Unified MCP Framework, a full-stack AI agent system that routes natural language commands to tools like filesystems, browsers, and GitHub APIs, as a B.Tech major project. After i…
Safescript, a new programming language designed for AI agents, eliminates the need for containers or virtual machines by using a closed instruction set and static DAG structure that prevents infinite …
A malware developer attempting to steal secrets from users of Anthropic's Claude AI model inadvertently exposed their own GitHub private token while publishing malicious npm packages. The developer's …
A malicious npm package named 'codexui-android' posing as a legitimate remote web UI for OpenAI Codex has been stealing authentication tokens from developers for the past month. The package, which ach…
Developer Phil Nash released Astro Related Content, an npm integration that uses AI-generated vector embeddings to automatically suggest semantically similar blog posts on Astro sites. The tool runs d…