Four vulnerabilities in CrewAI could be chained together via prompt injection for sandbox escape, remote code execution, and ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Google releases ADK 1.0 for Java, expanding its framework for AI agents with tools, a plugin system, and agent collaboration.
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
According to Sola Security, a single ChatGPT prompt triggered a mass file retrieval, and none of the company’s monitoring ...
Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...
OpenAI published a Codex plugin on March 30 that installs directly inside Anthropic’s Claude Code, letting developers run code reviews and delegate tasks to Codex without leaving their existing ...
A hacker took over an account belonging to the lead maintainer of the JavaScript library, Axios, which is used to handle HTTP requests, as reported by Cybernews. Security researchers found that ...
Researchers managed to steal GitHub OAuth tokens by abusing a command injection vulnerability.