NPM
30 days · UTC
Synchronizing with global intelligence nodes...
Anthropic’s Claude Code source leaked via npm sourcemap; roadmap-level agent features exposed
Anthropic accidentally shipped a Claude Code npm update that exposed its source, revealing always-on agent plans and internal scaffolding. A packagin...
Claude Code 2.1.89 ships after 2.1.88 source leak; reliability fixes land and "computer use" preview expands scope
Anthropic briefly leaked the Claude Code CLI source via v2.1.88, then shipped v2.1.89 with key reliability fixes while "computer use" rolls on in prev...
LiteLLM PyPI compromise shows why to turn on dependency cooldowns now
A malicious LiteLLM 1.82.7/1.82.8 PyPI release briefly stole developer creds on install, highlighting the value of package “cooldown” age gates. Simo...
One-scan repo context generation with codebase-md
Codebase-md scans your repo and auto-generates consistent AI coding context files for popular tools, reducing manual drift and improving prompt qualit...
Prompt injection poisons GitHub Actions cache and exfiltrates secrets in Cline incident
A prompt injection in Cline’s AI-powered GitHub issue triage poisoned shared caches and leaked release secrets, underscoring the need for CI/CD-grade ...
Claude Code v2.0.75 published without GitHub release notes
Anthropic’s Claude Code v2.0.75 is on npm but lacks a corresponding GitHub release/tag, so the /release-notes command only shows up to v2.0.74. This i...