trustlock

trustlock Un controlador de admisión de dependencias nativo de Git. Evalúa señales de confianza en cada cambio de dependencia. Cómo funciona trustlock se ejecuta como un hook pre-commit de Git modo consultivo y una verificación de CI modo forzado: Consultivo pre-commit: advierte sobre infraccione...

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked it safe. The payload was harmless by...

Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper

A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets...