Agent Plugins 1.0 defines a write-once-run-anywhere container for passing tools and skills across different agent platforms ...
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.