Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

An anonymous researcher has dumped what they say is working exploit code for zero-day vulnerabilities across 15 software ...

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Just two months ago, researchers at the Data Intelligence Lab at the University of Hong Kong introduced CLI-Anything, a new state-of-the-art tool that analyzes any repo’s source code and generates a ...

Administrators of the open-source game engine Godot have blocked automated code submissions to protect repository governance and fix review backlogs.