Cursor CLI(cursor.com)

360 points by gonzalovargas 1 year ago | 249 comments

Product page for Cursor CLI (beta), a terminal-based AI coding agent from Cursor installable via a curl script.

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Snowflake AI Escapes Sandbox and Executes Malware(promptarmor.com)

224 points by ozgune 7 months ago | 70 comments

Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

GPUHammer: Rowhammer attacks on GPU memories are practical(gpuhammer.com)

260 points by jonbaer 1 year ago | 89 comments

CursorBench 3.1(cursor.com)

151 points by handfuloflight 3 months ago | 91 comments

NPM debug and chalk packages compromised(aikido.dev)

1287 points by universesquid 1 year ago | 699 comments

Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.

Malicious versions of Nx and some supporting plugins were published(github.com)

427 points by longcat 1 year ago | 421 comments

GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.

Malicious npm packages detected across Red Hat Cloud Services(github.com)

728 points by kurmiashish 4 months ago | 411 comments

GitHub issue in RedHatInsights/javascript-clients reporting malicious npm releases published under the @redhat-cloud-services scope, citing StepSecurity analysis.

NPM flooded with malicious packages downloaded more than 86k times(arstechnica.com)

349 points by jnord 1 year ago | 248 comments

Ars Technica article on the PhantomRaven campaign, in which malicious NPM packages that fetch dependencies from untrusted sites were downloaded over 86,000 times.

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware(github.com)

367 points by tosh 1 year ago | 263 comments

GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.

Show HN: Argus- open source security platform to protect against agentic attacks(github.com)

11 points by thomasunise 1 day ago | 1 comments

GitHub repository for Argus, an open-source agentic security operations platform with an evidence graph, swarm-aware detections, governed AI agents, and an approval-gated action broker.