Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Tech Times

Open-Source Coding Model Ornith-1.0 Writes Its Own Training Scaffold in Reinforcement Learning

Open-source agentic coding model Ornith-1.0, released today under the MIT license, uses a self-improving reinforcement ...
GitHub

FPTrans: Feature-Proxy Transformer for Few-Shot Segmentation

Create a virtual environment and install the required packages. conda create -n fptrans python=3.9.7 conda activate fptrans conda install numpy=1.21.2 conda install ...
GitHub

Affaan Mustafa

I turned side questing into a modern prestige profession. All it took was being cynical about everything except myself, then post-training my own policy to maximize expected return (serendipitous ...