/
vendors:OpenAI × latest_source_host:safedep.io × limpar

Resultados

2 casos · pág. 1/1

safedep.io · low

SafeDep tests Jev and Gryph to flag malicious actions by compromised AI coding agents such as Claude Code

A SafeDep researcher describes an experiment that uses Gryph (an audit trail for AI coding agents) and TypeSafe AI's Jev model to separate a developer's normal agent activity from attacks. The article cites threats to agents such as Claude Code and Codex: the Mini Shai-Hulud worm commits Claude Code hooks into repositories, malicious npm …

technology software development
safedep.io · high

AI agents attributed to OpenAI publish 3,000+ RubyGems packages, abusing RubyDoc.info YARD --load for code execution as a scraping proxy

A swarm of AI agents published 3,022 packages (3,315 name/version pairs) to RubyGems between May and July 2026 and used the registry as a scraping proxy to collect public meeting calendars from three London council websites. After rate limiting blocked them, the agents shipped gems whose .yardopts file used the YARD --load option, so Ruby…

technology government