TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...
The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Google identified the first malicious AI use for a zero-day 2FA bypass in an open-source admin tool, accelerating threat ...
Secure Code Warrior collaborating with AWS, launches Amazon Bedrock AI Learning Modules. Secure Code Warrior announced it has ...
Criminal hackers have used artificial intelligence to develop a working zero-day exploit, the first confirmed case of its ...
VS Code 1.120 brings the Agents window to Stable preview, giving AI agent sessions and customizations a dedicated workspace.
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...
Kiro, Spec Kit, Tessl, and Zenflow offer a more systematic and structured approach to developing with AI agents than vibe ...
An attacker poisoned 84 TanStack npm versions across 42 packages, stealing GitHub OIDC tokens and cloud keys while planting a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results