A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.
A free, open-source library called claude-skills has grown into the most comprehensive collection of reusable skill packages for AI coding agents, shipping more than 345 production-ready packages that ...