A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...

Vercel open-sourced durable-harness, an Apache-2.0 package that makes Pi, OpenCode, Claude Code and Codex agent sessions ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

PHP2Shell (CVE-2026-109618/109619) enables RCE without authentication. Patches are coming today; the NCSC and other sites are ...

Microsoft has released a public preview of dotnetup, a cross-platform toolchain manager that installs and updates .NET SDKs ...

Coding agents trip over PowerShell and hang on dev servers. Four fixes that hold on Windows: argument arrays, hooks, process ...

Learn how to generate PDFs from Cloudflare Workers using Tectonic and Cloud Run, with practical lessons on Docker, security, ...

JetBrains' Java and Kotlin by IntelliJ IDEA extension reaches release candidate for VS Code, Cursor, and Antigravity after a ...

Have you ever been concerned that while asking Claude Code to perform tasks, it might delete or rewrite files you wanted to keep?This article explains how to add settings on your computer to stop such ...

Hackers are exploiting Plex2Shell vulnerabilities in the wild to deploy XMRig cryptominers and proxy software on exposed Plex ...

Claude Code Review, GitHub Copilot, Cursor Bugbot, Codex, and CodeRabbit compared on bug detection, pricing, and benchmarks ...

Fake Apex Accelerator npm packages deliver Windows stealers and a macOS backdoor while redirecting AI agent requests to ...