SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
GitHub

Track C: 3D Avatar, Ses GörselleÅŸtirici & WebRTC Uzman Köprüsü - Dilfin Akkurt (231118035) #321

- **Aktif Kanallar:** Görüntü (Kamera), Ses (Mikrofon), Ekran Paylaşımı (Ekranın tamamı paylaşılmıştır) ## 🚨 Kriz ve STUCK Detayı (Cycle 5) - **Hata ...
The Hacker News

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat ...
InfoWorld

GitHub finally pulls the plug on automatic install script execution for npm

The change, expected in July, will likely block one of the more common attack vectors; developers are wondering what took GitHub so long, and why other repositories acted so much sooner. The ability ...
GitHub

tcondello/uv-scripts-aws

INPUT_DATASET=stanfordnlp/sst2 \ OUTPUT_DATASET=your-username/sst2-MiniLM-embeddings \ LIMIT=1000 \ bin/ec2-hf-run recipes/embed-dataset.py INPUT_DATASET=stanfordnlp ...