3 casos · pág. 1/1
Security firm V12 reported on October 22 that the x402 SDKs, an open standard for AI agents paying for API calls over HTTP 402, contained 25 flaws, three rated critical. The most notable was that the default client set no spending limit, so a malicious API could get an agent with an automatic signer to sign a payment for its full balance …
Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" on the systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and, in some cases, obtained the decrypted contents (thehackernews.com, techcrunch.com, bleepingcomputer.com). Railway detected the activity e…
SafeDep reports that the npm package imgdecode (versions 1.0.0-1.0.3, publisher malfexteste8) is part of the MALFEX campaign, which targets Windows developers. After npm removed earlier JavaScript loaders, the operator moved the loader logic into a compiled Node.js native addon (a Windows DLL). On require('imgdecode') from an interactive …
