Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
GitHub

MCP SAP GUI Server

An MCP (Model Context Protocol) server that enables AI assistants to interact with SAP GUI for Windows through the SAP GUI Scripting API. It is client-agnostic: if your MCP client can launch a local ...
Visual Studio Magazine

Open VSX 1.0.0 Puts Focus on Open Extension Registry for VS Code Ecosystem

Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.
VentureBeat

Anthropic says 80% of its new production code is now authored by Claude — how your enterprise can keep up

Credit: VentureBeat made with OpenAI ChatGPT-Images-2.0 Anthropic co-founder and CEO Dario Amodei said it was coming, but it still feels like a milestone: More than 80% of the code merged into ...
GitHub

CogAgent: An open-sourced VLM-based GUI Agent

🏆 June 2024: CogAgent was accepted by CVPR 2024 and recognized as a conference Highlight (top 3%). The CogAgent-9b-20241220 model has achieved state-of-the-art results across multiple platforms and ...
SecurityWeek

VS Code Vulnerability Allows One-Click GitHub Token Theft

A security researcher has disclosed details of a severe Visual Studio Code (VS Code) vulnerability that can be exploited to steal a user’s GitHub token and access their repositories. The vulnerability ...