Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
IEEE

Navigating (in)Security of AI-Generated Code

Abstract: The increasing use of large language models (LLMs) such as OpenAI's ChatGPT and Google's Bard in the software development industry raise questions about the security of generated code. Our ...
note

Writing ER diagrams in Mermaid notation with Visual Studio Code

While I was looking for ways to move away from Excel, I arrived at Mermaid notation as an effective solution. Mermaid is a notation that allows you to create diagrams using text, and you can create ...