How software engineers really feel about AI coding

The discourse around AI often focuses on those who entirely embrace — or deeply despise — the tech. For engineers, the truth ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
cryptopolitan

Microsoft, Google patch flaws as Cordyceps spread across open-source repositories

Security researchers at Novee found over 300 exploitable CI/CD workflow chains across repositories belonging to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. The flaws ...
theregister

'Please do not vibe f--- up this software': Broken backups spark AI coding row in rsync project

Incremental backups started failing for some rsync users after a recent update, and what they found in the project's commit history quickly turned a routine bug hunt into yet another fight over ...