First screen, captured .
450 points by j12y | 172 comments
Semgrep security research post reporting that PyPI package lightning versions 2.6.2 and 2.6.3 were compromised with Shai-Hulud themed credential-stealing malware.
415 points by Fibonar | 153 comments
A FutureSearch engineer's blog post with the Claude Code transcript of discovering the compromised LiteLLM PyPI release and getting it quarantined.
827 points by takira | 366 comments
PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.
427 points by longcat | 421 comments
GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.
446 points by Bogdanp | 199 comments
Filippo Valsorda's blog post on using Claude Code to debug his new Go implementation of the ML-DSA post-quantum signature algorithm.
377 points by noahbrier | 197 comments
Blog post by Noah Brier on Alephic describing how Claude Code, combined with Obsidian's plain Markdown files and filesystem access, became his agentic operating system.
794 points by pranshuchittora | 145 comments
OpenCode's post on X announcing a security breach tied to a large-scale distillation attack that affected 1.4% of OpenCode Console users.