T3MP3ST

🌩️ T3MP3ST 🌩️ ▄▄▄█████▓▓█████ ███▄ ▄███▓ ██▓███ ▓█████ ██████ ▄▄▄█████▓ ▓ ██▒ ▓▒▓█ ▀ ▓██▒▀█▀ ██▒▓██░ ██▒▓█ ▀ ▒██ ▒ ▓ ██▒ ▓▒ ▒ ▓██░ ▒░▒███ ▓██ ▓██░▓██░ ██▓▒▒███ ░ ▓██▄ ▒ ▓██░ ▒░ ░ ▓██▓ ░ ▒▓█ ▄ ▒██ ▒██ ▒██▄█▓▒ ▒▒▓█ ▄ ▒ ██▒░ ▓██▓ ░ ▒██▒ ░ ░▒████▒▒██▒ ░██▒▒██▒ ░ ░░▒████▒▒██████▒▒ ▒██▒ ░ ▒ ░░ ░░ ▒░ ░░...

opencode

开源的 AI Coding Agent。 English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt 安装 直接安装 YOLO curl -fsSL https://opencode.ai/install | bash 软件包管理器...

yoloai

yoloAI 面向 AI 编码代理的沙箱运行器。无需权限疲劳，凭据不进入沙箱，在你批准之前不会对你的项目做任何更改。 AI 编码代理在关闭护栏时表现最佳，但在你的真实机器上这样运行是非常糟糕的。yoloAI 为代理提供一个可丢弃的沙箱，它可以在其中自由编辑和运行任何内容，无需人工值守。你的项目、你的凭据和你的网络始终由你掌控。当代理完成后，审查差异并应用你想要保留的内容。 你 沙箱 你的项目 │ │ │ ├─ yoloai new fix-bug . ├─ 项目的沙箱副本 │ │ │ │ ├─ ├─ 代理自由工作 │ │ │ （无权限提示） │ │ │ │ ├─ yoloai diff...

opencode-secure

El agente de codificación de IA de código abierto. Instalación YOLO curl -fsSL https://opencode.ai/install | bash Gestores de paquetes npm i -g opencode-ai@latest o bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS y Linux...

opencode v1.18.27

The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation YOLO curl -fsSL...

CVE-2026-75130

Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the Custom AI Instructions feature served via the MCP server. Attackers can poison the custom instruction...

CVE-2026-75130

Context7 through 2.1.2 has a prompt injection flaw in its Custom AI Instructions feature served via the MCP server. Attackers poison unsanitized instructions to exfiltrate credentials from environment files and delete files on victim machines when the agent makes routine documentation requests. C...

bromure agentic-coding-v4.5.4

Bromure Secure, ephemeral computing in disposable Linux VMs on macOS. → Full details, screenshots, and downloads at bromure.io This repo ships two sibling apps, both built on Apple's Virtualization.framework: Bromure — every browser session runs in a throwaway Linux VM. Close the window, the VM i...

openshell-sandbox-poc

OpenShell + Kata Containers: Dual-Protection PoC A proof-of-c...

CVE-2026-28353: Embedded Malicious Code

Trivy Vulnerability Scanner is a VS Code extension that helps find vulnerabilities. In Trivy VSCode Extension version 1.8.12, which was distributed via OpenVSX marketplace was compromised and contained malicious code designed to leverage local AI coding agent to collect and exfiltrate sensitive...

PT-2025-47816

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.26.7 Description Roo Code, an AI-powered autonomous coding agent, had a validation error that allowed it to automatically execute commands not on the approved list of prefixes. This occurred in versions before...

EUVD-2025-20299

Malicious code in bioql PyPI...

EUVD-2025-19434

Malicious code in bioql PyPI...

EUVD-2025-22473

Malicious code in bioql PyPI...

PT-2025-30619 · Robocode · Robocode

Name of the Vulnerable Software and Affected Versions: Roo Code versions 3.23.18 and below Description: Roo Code, an AI-powered autonomous coding agent, does not validate line breaks in its command input. This bypasses the allow-list mechanism due to a lack of parsing or validation logic,...

CVE-2025-53536

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were multiple ways to achieve that. One example is with...

CVE-2025-53536

Roo Code (AI-powered autonomous coding agent) prior to version 3.22.6 is affected. If a victim had the Write auto-approved mode, an attacker who can submit prompts could write to VS Code settings files and trigger code execution. A concrete example is the php.validate.executablePath setting, wher...