AIQB
TutorialsOrdinary

18 malicious npm packages are still remote-controlling AI coding agents (verified today)

Source: DEV Community·

Summary

TL;DR While building a public advisory database for the Model Context Protocol...
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-f7c22095253197f22dd606a4
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
I Ran DeepSeek V4 Flash Across Two DGX Sparks Over Ethernet
TL;DR: Two 128GB GB10 computers can run the official FP8 DeepSeek V4 Flash 0731 checkpoint as one...
Source: DEV Community · DeepSeek
TutorialsOrdinary
How AI context compression actually works, part 1
I build Compresso, a local AI compression layer, using different techniques like Headroom, Rtk and...
Source: DEV Community
TutorialsOrdinary
Beyond Vibes: Architecting Closed-Loop AI Agents with Local SLMs, Deterministic Evals, and Human Learning Loops
How to build a production-grade drafting agent on local SLMs (Llama 3.2 3B) using deterministic Python verification, tri-state guardrails, QWK-calibrated evals, and continuous few-shot learning.
Source: DEV Community · Llama
TutorialsOrdinary
Your AI context gets worse the longer you work
I had my own infrastructure context server running behind my editor, the way I do every day, and...
Source: DEV Community
TutorialsOrdinary
AI Writes Locally Correct Code. Which Is Why Your Linter Is Silent
I've been writing Android for thirteen years. For the last two of them, a large share of the code...
Source: DEV Community
TutorialsOrdinary
The receipt should come from the person who received it
This is a submission for Weekend Challenge: Generosity Edition What I Built Every...
Source: DEV Community
TutorialsOrdinary
The Harness Is Not Intelligence: What Is Actually Improving in AI Agents?
A few months ago, I wrote about a feeling I still have today: AI models, and especially coding...
Source: DEV Community
TutorialsOrdinary
HealthMitra: An AI Voice Health Companion for India, Built in 10 Days
How I built HealthMitra, a Hindi/English voice agent for India's health-access gap, on LiveKit and Murf Falcon — plus three real bugs it took to get the multi-agent handoffs working.
Source: DEV Community
TutorialsOrdinary
I parsed 76,801 lines of my own Claude Code history. Three things nearly broke my parser.
Claude Code writes every session to ~/.claude/projects as JSONL. I wanted to know what I'd actually...
Source: DEV Community · Claude
TutorialsOrdinary
13 of 14 Models Write Messier Code Than the Human Who Fixed the Same Bug
We measured whether AI-written code is messier than human-written code, across 500 real bugs where a...
Source: DEV Community