pass

mentions 3 type Organization feed RSS

// recent coverage 3 mentions

02:02

2026-08-15

dev.to

ai-safety

Why your AI coding agent should never see your API keys

A developer has released Trustless, an open-source CLI that prevents AI coding agents from exposing API keys and other secrets. The tool injects credentials into subprocesses while sanitizing output, …

00:00

2026-06-04

semgrep.dev

ai-safety

Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp file and Compromises 57 Packages

A self-spreading npm worm called Miasma v2 compromised 57 packages across 286+ malicious versions by using a malicious binding.gyp file to trigger arbitrary code execution during npm install, without …

02:32

2026-05-23

gist.github.com

developer-tools

🪣 ralph-dig #61: maw token — CLI plugin born from 'can we put .envrc in pass?' · Token Oracle creation story · 7 vault tokens, 47+ oracles mapped

The article describes the creation of "maw token," a CLI plugin that manages Claude OAuth tokens and `.envrc` files across an Oracle fleet using the GPG-encrypted `pass` password vault. Born from the …

// co-occurs with top 8 entities

Trustless 1 Claude Code 1 OpenCode 1 OpenRouter 1 xAI 1 Bitwarden 1 gitleaks 1 maw 1

// topics top 6 topics

ai safety 2 ai agents 2 developer tools 2 ai infrastructure 1 cybersecurity 1 open source 1