Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
InfoWorld

Best practices for using AI to generate C# code

AI can generate C# code far faster than you can fix it. Follow these best practices to ensure that your AI-generated C# is ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
Tom's Hardware on MSN

AI coding agents can be tricked into installing malware via 'clean' GitHub repositories

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.
Visual Studio Magazine

Uno Platform Helps Ship First Stable SkiaSharp 4.0 Release for 2D .NET Graphics

SkiaSharp 4.148.0 marks the first stable release in the SkiaSharp v4 line. The project is now co-maintained by Microsoft's .NET team and Uno Platform, reflecting a broader open-source collaboration.