GitHub package firewall checks npm packages against enterprise policy before install, blocking known malware and brand-new ...

ByteDance's PICO has been publishing an Apache-2.0 plugin marketplace for AI coding agents since June, and since September it ...

A good package manager makes Linux life a lot simpler, especially for those will little experience. These are the ones I ...

Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...

Cybersecurity researchers have uncovered a novel attack vector targeting developers who utilize automated artificial intelligence coding assistants.

A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed ...

Security researchers found a planted AGENTS.md instructions file that turned a coding agent against its own user. The trick ...

Compare five SCA tools for detecting malicious open-source packages, from behavioral analysis and install-time blocking to ...

Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding ...

"Wait, can my computer be hijacked just by writing code?"Yes, it can.And that's even if you haven't written any malicious code yourself.Apparently, malicious programs can sometimes be hidden in the ...

Anthropic sandbox-runtime gives AI agents OS-level sandboxes without containers; Anthropic reports 84% fewer Claude Code ...