Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...
Claude Code Dynamic Workflows, launched May 28, 2026, replaces context-window orchestration with a JavaScript script Claude writes on the fly for each task. Runs cap at 1,000 parallel subagents with ...
Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...
GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.
The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.
Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.
Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.
GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on ...
Reported over three years ago and allegedly still not properly fixed, the vulnerability enables attacks to execute JavaScript ...
Today, I’m pleased to introduce something I’ve been working on for the past six months: Shortcuts Playground, a plugin for ...