AI圈报教程 / 实战普通
Malicious MCP Servers and the Unsolved Supply Chain Problem for AI Agents
内容摘要
On March 24, 2026, a poisoned PyPI package was live for 40 minutes. During those 40 minutes, every...
相关推荐
综合分类、实体标签与信息来源匹配
教程 / 实战普通
Your agent orchestrator is a black box. Mine is a folder.
An experimental, repo-local coordination layer for coding agents: folders are columns, Markdown files are tickets, and Git is the audit log.
信息来源：DEV Community
教程 / 实战普通
Speculative decoding won't change your model's distribution. It might still change your output.
There's a thread on the DeepSeek-R1 model page that's been sitting unresolved since March last year,...
信息来源：DEV Community · DeepSeek
教程 / 实战普通
RAG Poisoning Is a Supply Chain Attack, Not a Prompt Injection Variant
In August 2024, researchers demonstrated a silent attack against Microsoft 365 Copilot. Any user with...
信息来源：DEV Community
教程 / 实战普通
AI Agents Are eval(userInput) With Extra Steps
In July 2025, a developer asked the Replit AI agent to make minor fixes during a code freeze. The...
信息来源：DEV Community
教程 / 实战普通
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors A...
信息来源：DEV Community
教程 / 实战普通
It Only Sent a GET. Why Did It Write? Effect Boundaries in Agent Tool Gates
GET is a method, not proof of no write. Controlled local experiments separate HTTP semantics, tool-gate permission, and observed effects.
信息来源：DEV Community
教程 / 实战普通
Binary Search Trees
Why should you care? Imagine you have thousands or millions of numbers and frequently need...
信息来源：DEV Community
教程 / 实战普通
Agent Code Execution Collapses the Trust Model to the Container Runtime
Agent Code Execution Collapses the Trust Model to the Container...
信息来源：DEV Community
教程 / 实战普通
I Tested 5 Local LLM Sizes in n8n. The 1.5B Model Beat 14B on Tool-Calling.
I spent a weekend benchmarking Qwen2.5 at five sizes — 0.5B, 1.5B, 3B, 7B, 14B — through five real...
信息来源：DEV Community · Qwen
教程 / 实战普通
LLM API Keys Fail Faster: Five Exposure Vectors Your Secret Hygiene Guide Has Not Caught Up With
A startup's OpenAI bill ran at $400/month for months. One public GitHub commit exposed the key for 11...
信息来源：DEV Community · OpenAI