Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
Linux Journal

CachyOS June 2026 ISO Released with Hyprland Noctalia, Faster Performance, and Smarter System Tools

The CachyOS team has released the June 2026 ISO, delivering another feature-packed update for its Arch Linux-based ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
note

Building a system to 'automatically detect presence/absence and control the air conditioner' using Tasker × SwitchBot × AWS

Many of you are likely using SwitchBot products. I also use a combination of a thermometer/hygrometer and an air conditioner to automate things. However, I had one ...
note

The story of how my hardworking HERMES drained 20 million tokens

Now, I'm reinstalling HERMES on my local PC. The settings haven't changed, so please refer to part 1. Since it's working now, here's what I did first. Initial setup in Obsidian. @HERMES Set up an LLM ...