yolo-cage

yolo-cage: 不造成伤害的自主编码代理 你是一位负责任的工程师。你绝不会让AI在你的最敏感系统和代码库中随意横行。 这就是为什么你绝不会 仅仅关闭像Claude Code这样的工具的安全保护。它会对每个危险操作询问许可！安全！ 于是你等待。你回答。决策疲劳开始产生。然后那一刻发生了。 权限提示忽略了威胁模型中最薄弱的部分：疲惫的用户。如果我们能赋予代理权力同时限制其影响范围，从而将你的决策延迟到PR审查时，那会怎样？ 那太好了！这就是 yolo-cage。 尝试它 root@kitploit: curl -fsSL...

CVE-2026-53231

In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't have support for PHY-driver SFP cages with the genphy code. On top of that, it was found by sashiko that running sfpbusaddupstream for genphy deadlocks,...

EUVD-2023-29867

Malicious code in bioql PyPI...

MAL-2025-43684 Malicious code in cage-farm-current (npm)

The package cage-farm-current was found to contain malicious code...

Malicious code in cage-farm-current (npm)

The package cage-farm-current was found to contain malicious code...

MAL-2025-16429 Malicious code in cage-js (npm)

The package cage-js was found to contain malicious code...

MAL-2025-26810 Malicious code in mp3-file-zip-d-ownload-82223-cage-tropical-48dqs-lilnlq (npm)

The package mp3-file-zip-d-ownload-82223-cage-tropical-48dqs-lilnlq was found to contain malicious code...

Malicious code in cage-js (npm)

The package cage-js was found to contain malicious code...

CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

Large Language Models Are Autonomous Cyber Defenders

Fast and effective incident response is essential to prevent adversarial cyberattacks. Autonomous Cyber Defense ACD aims to automate incident response through Artificial Intelligence AI agents that plan and execute actions. Most ACD approaches focus on single-agent scenarios and leverage...

These Guys Hacked AirPods to Give Their Grandmas Hearing Aids

Three technologists in India used a homemade Faraday cage and a microwave oven to get around Apple’s location blocks...

CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

CVE-2023-25980

CVE-2023-25980 concerns the WordPress plugin “Optimize Database after Deleting Revisions” (CAGE Web Design) with CSRF vulnerability in versions

PT-2023-20405 · Cage Web Design · Optimize Database After Deleting Revisions

Name of the Vulnerable Software and Affected Versions: CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin versions = 5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

GHSA-JF8X-WG7F-P3W8 Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

Malicious Package

cage-js is a malicious package. It downloads and runs malicious code from remote server as postinstall script...

Malicious Package

Overview All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that comput...