Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

JFrog's security research lab, based in Silicon Valley, said Friday (local time) it had discovered six malicious packages in ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...

Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

New AI agent enables engineering teams to plan, execute, and manage complex code changes across hundreds or thousands of ...

Learn how to evaluate AI code quality platforms using enterprise criteria including scalability, predictive insights, and business impact.

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

“Honestly, AI slop [pull requests] are becoming increasingly draining and demoralizing for #Godot maintainers,” Verschelde ...

Administrators of the open-source game engine Godot have blocked automated code submissions to protect repository governance and fix review backlogs.

Figma's update adds a new code layer, support for motion and shaders, and the ability to create custom plugins for various ...