Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
The Chinese espionage threat group Mustang Panda has updated its CoolClient backdoor to a new variant that can steal login ...
Hackers have listed 860GB of private source code and assets stolen from Target’s Gitea self-hosted software development ...
Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...
The QuantConnect MCP Server is a bridge for AIs (such as Claude and OpenAI o3 Pro) to interact with our cloud platform. When equipped with our MCP, the AI can perform tasks on your behalf through our ...
Given a file (or some information about a file), return a set of standardized tags identifying what the file is. This is a Rust port of the Python identify library. What is the type: file, symlink, ...
Researchers with Cyata and BlueRock uncovered vulnerabilities in MCP servers from Anthropic and Microsoft, feeding ongoing security worries about MCP and other agentic AI tools and their dual natures ...