Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

This repository contains the reference architecture and components for building enterprise-grade modern composable frontends (or micro-frontends) and cloud-native applications. It is a collection of ...

GitHub对其进行了重大更新的CodeQL引擎，开发者现在可以通过"models-as-data"直接定义自定义的净化器（sanitizer）和验证器（validator），这一变化简化了团队在代码库中扩展安全分析的方式。此次更新使工程师无需编写自 ...

Overview:  AI coding tools are transforming software development, but strong programming fundamentals and system design ...

This software provides a collection of routines that can be used to build client modules for OAuth 2.1, OAuth 2.0 with the latest Security Best Current Practices (BCP), and FAPI 2.0, as well as OpenID ...

Security researchers warn that Anthropic’s Claude in Chrome extension can be abused by malicious extensions that exploit ...

ClaudeBleed, a vulnerability in Claude in Chrome, allows malicious extensions to hijack the AI agent for nefarious purposes.

Bun的创始人Jarred ...

The new weekly update focuses on agent workflows, observability, trust controls, Markdown usability and engineering changes.

A security researcher’s decompilation of the White House’s official mobile app uncovered hidden GPS tracking, insecure code ...

一、先看一组数据今天 GitHub Trending 一共采集了 63 个 AI 相关项目。按语言分：• Go：20 个• Rust：16 个• Python：13 个• TypeScript：5 个• JavaScript：1 个如果只看数量，Go 赢了。但如果看"AI 浓度"——这个项目有多少在做 AI 核心的事，而不是围绕 AI ...