AI coding assistants are leaking secrets into public code repositories and websites, with researchers finding 428 npm packages containing .claude/settings.local.json files, 33 of which held real crede…
A developer built Sentinel, a six-layer audit pipeline that runs every MCP server in the MarketNow catalog. The pipeline combines static analysis, dependency scanning, behavioral pattern detection, ad…
Open Kioku, a new open-source tool, provides AI coding agents with a local evidence layer by indexing codebases and offering read-only MCP tools for pre-edit analysis. The tool indexes symbols, refere…
Developer Aakash Desai released CTOP, a terminal pane for monitoring AI coding agents including Claude Code, Codex CLI, OpenCode, and Devin, providing real-time CPU, memory, token usage, context windo…
On February 17, 2026, attackers compromised the Cline AI coding tool via a malicious npm package, silently installing OpenClaw on 4,000 developers' machines through a postinstall script. This "slopsqu…
A developer released Sandbox-proxy, a zero-dependency Go forward proxy that injects credentials into outbound requests on the wire, allowing sandboxed code to use tokens without seeing them. The tool …
A malicious npm package called codexui-android stole OpenAI Codex authentication tokens from developers in a supply chain attack. The package, which had over 29,000 weekly downloads and was also bundl…
Monlite launches a zero-dependency TypeScript backend for AI agents that combines memory, vector search, task queues, locks, and cron into a single SQLite file, eliminating the need for Docker or mult…
HeroUI v3, a ground-up rewrite of the React component library formerly known as NextUI, has been released with over 75 web components and a new React Native library of 37 components. Built on React Ar…
A frontend developer at Sima-Land built and published a React date picker npm package called daterly, written mostly with Claude Code and Claude Design. The package prioritizes first-class support for…
A developer warns that AI agents writing code and running on platforms are reintroducing security vulnerabilities, including ACL inconsistencies and prompt injection, as the industry prioritizes speed…
A developer argues that AGENTS.md files, while useful for providing repo-specific guidance to AI coding agents, are insufficient for ensuring safe, verifiable, and inspectable agent execution. The pos…
A developer built Archie, a tool that generates and maintains a structured ARCHITECTURE.md for codebases using a single command. It leverages Gemini's large context window and incremental updates via …
A developer shares three MCP servers they use daily with Claude Desktop: server-filesystem for reading project files, server-github for code reviews, and server-postgres for database queries. Each ser…
Security researchers at Koi Security discovered the first in-the-wild malicious MCP server, an npm package called postmark-mcp that silently exfiltrated emails after a one-line change in version 1.0.1…
A developer built chatgpt2codex, a CLI tool that imports shared ChatGPT conversations into local Codex CLI sessions. The tool preserves context from ChatGPT discussions, allowing developers to resume …
AutoGPT has evolved from a standalone autonomous script into a low-code platform for building, deploying, and managing continuous AI agents. The platform includes a block-based agent builder, a server…
Google Labs released design.md, an open-source format specification that combines YAML front matter with Markdown prose to give AI coding agents a structured, lintable blueprint for a project's visual…
A developer released webmcp-gen, a build-time code generation tool that creates WebMCP tool definitions and handler stubs from TypeScript interfaces. The tool complements existing runtime and crawling…
Developer released ai-whisper v0.7.0, an open-source terminal tool that pairs AI coding agents like Claude and Codex in structured workflows to improve code quality through collaborative review. The t…